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Preface 


Access Controlled: The Shaping of Power, Rights, and Rule in Cybersp,Ke is the latest report 
from the OpenNet Initiative (ONI), which h a collaboration of the Citizen Lab at the 
Munk Centre for International Studies, University of Toronto; the Berkman Center 
for Internet and Society at Harvard University; and the Sec Dev Group (Canada). The 
country profiles and regional overviews provided In this volume have been sub- 
stantially updated and revised to reflect recent events since our last publication. Access 
Denied. In addition. Access Controlled Includes six newly authored thematic chapters 
that analyze the themes of our investigations and grapple with the theoretical and 
public policy Implications. 

With Access Controlled , we take on new themes emerging from our research and con- 
centrate on the countries that make up the Organization for Security’ and Cooperation 
In Europe (OSCE), as It Is there, primarily, where some of the most important tech- 
niques of next-generation Internet controls are emerging and a normative terrain Is 
being set. While the Access Controlled volume focuses on the OSCE region as an Impor- 
tant locus of norms and emerging techniques, the ONI conducted tests In more than 
65 countries over the last year and a half. We have Included a selection of these 
regional overviews and country profiles In this volume on the basis of two criteria: first, 
we Included countries that either border on or have strategic significance to the OSCE 
region; second, we Included countries that are significant stories In and of themselves 
and on which we wanted to report. China and Iran are Included in both categories, 
for example, but we also included Egypt. Tunisia, and South Korea (which are OSCE 
"partner in cooperation" states), as well as Australia and New Zealand, and all our 
regional overviews. As with Access Denied, all our country profiles and regional over- 
views are accessible In full on our Web site: http://opennet.net/, as well as the thematic 
chapters of this book. 


Ronald Delbert and Rafal Rohozlnskl 
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Foreword 


Imagine If an unknown person entered your home on a regular basis and removed 
books from your bookshelves. You would never be told which books were being taken 
away, and you would never be given a reason except that someone, somewhere, some- 
how, deemed them "extremist." "Indecent." or simply “Insulting." or felt that they 
might "Incite" some form of hatred. Imagine If the books removed Included historical 
research on disputed facts, secular depictions of religious Images, and Irreverent 
accounts of the conduct or policies of political leaders. 

Couldn't happen In a democracy? Guess again. 

Under the guise of protecting citizens from "smut" and "oflenslveness," Internet fil- 
tering programs routinely block access to thousands of World Wide Web search results, 
home pages, chat rooms, newsgroups, and other Internet options — in democratic 
countries as well as In authoritarian states. In most cases the criteria are based on an 
arbitrary and politicized understanding of what Is "smut" or "offensive." 

Online surveillance and censorship are growing in scale, scope, and sophistication 
around the world. This growth is not surprising given the Importance of the medium. 
But there Is Increasing cause for concern about the Implications of these trends for 
media freedom, for unhampered discussion of matters of public Interest, and even for 
political activism. 

In charting these developments, surveys canted out by the OpenNet Initiative (ONI) 
are indispensable tools In my own dally job of reminding governments of the Organi- 
zation for Security and Cooperation in Europe (OSCE) of their commitments concern- 
ing the free flow of Information. 

Published In 2007, ONI’s first global survey of Internet filtering. Access Denied: The 
PracDce and Policy of Global Internet Fllterbig, revealed that "state-mandated net filter- 
ing" was carried out In a only "a couple" of countries In 2002— but by 2007, It was 
under way In 2S out of the 41 countries scrutinized. 

In Its new publication, Access Controlled: The Shaping of Power. Rights, and Rule In 
Cybetspace , ONI goes further. 
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It shines a spotlight on filtering to help make the practice more transparent, or at 
least to divulge It as an acknowledged fact. And It also predicts a rise In more "subtle" 
forms of Internet censorship, such as blocking certain political Web sites during elec- 
tion periods or waging cyberwarfaie campaigns such as those recently witnessed In 
the Russlan-Oeorgian conflict. 

One of the most regrettable aspects of net filtering Is the fact that It Is often Invisible— 
and almost always happens out of public control. As a citizen, there Is no place you can 
turn to get answers from your state authontles about how and why they are filtering, 
and about what Is being blocked. 

In the early days of the Web, a decade or so ago, It was taken for granted that free- 
dom of expression online would Inexorably evolve and progress. It was assumed that 
governments that did not uphold the fundamental human right to speak and write 
freely would be powerless against the spread of those values over the Internet. 

By now, though, those early dreams have been dashed. The reality today is that 
Internet censorship Is a growing practice both east and west of Vienna, with the filter- 
ing of Internet content carried out by both established Western democracies and tran- 
sitional ones. Indeed, the countries where Internet matters the most as the sole carrier 
of real news media are the same countries whose governments, posing as "defenders" 
of the public, filter and block the most online content. 

No one can rely on the Internet anymore as a self-healing mechanism that can 
defeat censorship or blocking on Its own. It Is for that reason that the Freedom of the 
Media office will continue to actively promote guarantees for freedom of the media on 
the Internet. 

Let us be clear. The benefits of the Internet far outweigh the dangers of misuse. In 
some countries, the Internet Is the only source of pluralistic and Independent Informa- 
tion, even If Internet penetration may still be low. Let us make sure that this unique 
source of ungulded Information does not dry out. 

In light of these Issues, 1 dedicate this foreword to Magomed Yevloyev, the publisher 
of the Independent news Web site lngushetlya.ru, who was shot dead on August 31, 
2008, while in police custody. The lngusheuya.ru Web site has been a torchbearer of 
what a free Internet stands for. access to a plurality of Information and opinion. 

1 am grateful for the partnership with the ONI, as well as for the Umely publication 
of this book, which would not have been possible without the generous contribution 
of the government of Ireland, for which I also express my gratitude. 


Mlklos Harasztl 

OSCE Representative on Freedom of the Media 
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1 Beyond Denial 

Introducing Next-Generation Information Access Controls 

Ronald Delbert and Ratal Rohozlnskl 


Introduction 

It Is hard to imagine the world before the Internet. A generation of digital natives has 
grown up with ubiquitous connectivity, where neither borders nor language seems a 
barrier to communication. 1 And yet, less than 20 years ago the global Information en- 
vironment was a much more controlled and regulated space, organized around sover- 
eign states. Throughout much of modem history, governments have wrestled with the 
tensions of the relentless drive to build new technologies and the unpredictable and 
often counterproductive consequences that flow from them for their power and au- 
thority. 2 No less of a historical Agure than Stalin captured this tension between the 
quest for modernity and the compulsion to control. When presented with a proposal 
to build a modern telephone system for the new Soviet state, he reportedly replied, "I 
can Imagine no greater Instrument of counterrevolution In our time.” 

The rise of the Internet coincided with a major set of political upheas'als that culmi- 
nated with the collapse of the Soviet Union and communist bloc. In the euphoria that 
ensued, the Idea of technological redemption, inevitable democratization, and for 
some, the end of history, coalesced Into a popular Ideology that equated technology 
with empowerment. This Idea was far from new. Indeed, the telegraph, electrical light- 
ing. and telephony all emerged at similarly transformational historical Junctures, lead- 
ing to a long pedigree of speculation regarding the democratizing role of technology in 
social and political change. 5 

There Is no doubt that the Internet has unleashed a wide-ranging and globally signif- 
icant shift In communications — a shift that has led to the empowerment of Individuals 
and nonstate actors on an unprecedented scale. At times, the Internet seems uncon- 
trollable, a constantly evolving and dynamic virtual realm, reshaped continuously by 
a growing number of users at edge points of the network. But Newtonian physics Is as 
relevant In politics and cyberspace as It Is In the physical realm. Just as with previous 
technological developments, as the Internet has grown in political significance, an 
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architecture of control — through technology, regulation, norms, and political calculus 
— has emerged to shape a new geopolitical Information landscape. 

In 2008, the OpenNet Initiative (ONI) published Its first global study— Access Dotted: 
The Practice and Policy of Global Internet Filtering*— which documented how states are 
seeking to establish borders In cyberspace. Our snapshot of 41 countries discovered 
that states were busy constructing defensive perimeters to deny access to unwanted 
content For the most part, these methods consisted of building firewalls at key Inter- 
net choke points. The People's Republic of China was among the first to adopt national 
filtering systems at the backbone of the country's Internet — popularly known as the 
"Great Firewall of China" — and It has become a paradigm of Internet censorship ever 
since. "Chlnese-style" filtering — as we call It here — represents the first generation of 
Internet control techniques. 

In Chlnese-style filtering, lists of Internet protocol (IP) addresses, keywords, and/or 
domains are programmed into routers or software packages that are situated at key 
Internet choke points, typically at International gateways or among major Internet ser- 
vice providers (ISPs). 5 Requests that are made for any information contained In the 
block lists are denied for citizens Using within those jurisdictions. The latter can hap- 
pen In a s’arlety of ways, with greater and lesser degrees of transparency, but It Is almost 
always static, fixed In time, and relatively easy to discern using the methods developed 
over time by the OpenNet Initiative’s researchers (see box on ONl’s methodology). 
Moreover, determined Internet users can circumvent them with relative ease. 

Not aU countries have been as forthright with their rationale for filtenng Internet 
content as China. Our research for Access Denial also found coyness on the part of 
many states to admit seeking to control Internet content. In many cases, denial of ac- 
cess occurred extralegaUy, or under the guise of opaque national security laws. Often, 
ISPs were simply asked or told to block access to specific content without any reference 
to existing law. Other times, blockages were difficult to distinguish from network errors 
or other technical problems, like denial of service attacks, but seemed suspiciously con- 
nected to political events. Many of the countries listed In our first report denied that 
they were in fact blocking access to Internet content or had any connection to attacks 
on services. We saw these events as anomalies Insofar as they did not fit the paradigm 
of Chinese style filtering and largely eluded the methodologies that we had developed 
to test for Internet censorship.® 

We have subsequently come to learn that these anomalies were. In fad, emerging 
norms. Since our research for Access Denied was conduded, a sea change has occurred 
In the policies and practices of Internet controls. States no longer fear pariah status by 
openly declaring their intent to regulate and control cyberspace. The convenient rubric 
of terrorism, child pornography, and cyber security has contributed to a growing ex- 
pectation that states should enforce order In cyberspace, tndudlng policing unwanted 
content. Paradoxically, advanced democratic states within the Organization for Secu- 
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Box 1.1 


The ONI employs a unique "fusion" methodology that cocnhines field investigations, tech- 
nical recocmais&ince. and data mining, fusion, analysis, aisd visualization. Our aim is to un- 
cover evidence of Internet content filtering in countries under investigation. Hie ONI's 
tests consist of running special software programs witliin countries under investigation 
that cor meet bad to databases tlsat contain lists of thousands of URLs. IPs. and keywords. 
The lists are broken down into two categories: global lists iisdude URLs. IPs. and keywords 
that are tested in every country, and which Iselp us make general comparisons of accessibility 
across countries. Global lists also provide a "snapshot" of accessibility to content typically 
blocked by filtering software programs, and can help us understand whether particular soft- 
ware programs are being used in a specific context. Local lists are unique for each country 
and are usually made up cif content in local languages. Tliese are high' -impact URLs, IPs, 
and keywords, meaning they are content that is likely to, or has been reported to have 
been, targeted for filtering. Our aim is to run tests on each of the main ISPs in a country 
over an extended period of time— typically at least two weeks on at least two occasions. 
Our accessibility depends very much on our in -country testers, and foe security and other 
reasons we are not always able to perform cornpreiiensive tests, meaning in some cases we 
have only partial results on which to make inferences. Our specially designed software 
checks access both witliin the country and from one or more control locations simultane- 
ously. Anomalies are analyzed and determinations are made as to wtietlier a site is accessi- 
ble or not and if tlie latter, how the inaccessibility occurs. In some instances, bkxi;- pages— 
Web sites tlsat explicitly confirm blocking— are yielded for requests for banned content. In 
other instances, connections are simply broken. In some cases, special filtering software b 
employed while in others routers are manually configured to block. 


rlty and Cooperation in Europe (OSCE) — including members of the European Union 
(EU) — are (perhaps unintentionally) leading the way toward the establishment of a 
global norm around filtering of political content with the Introduction of proposals to 
censor hate speech and militant Islamic content on the Internet. This follows already 
existing measures in the UK. Canada, and elsewhere aimed at eliminating access to 
child pornography. Recently and amid great controversy, Australia announced plans 
to create a nationwide filtering system for Internet connectivity in that country'. Al- 
though the proposal has ultimately languished, it shows the extent of this growing 
norm. No longer is consideration of state-sanctioned Internet censorship confined to 
authoritarian regimes or hidden from public view. Internet censorship is becoming a 
global norm. 

At the same time, states have also become more cognizant of the strategic im- 
portance of cyberspace (of which the Internet is an important constituent compo- 
nent). Cyberspace has become militarized. A clever use of the Internet by Insurgents 
and militants in Iraq and other parts of the Middle East, the significance of the Internet 
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In conflicts such as the 2008 Russla-Ceorgla war, and revelations concerning large- 
scale cyber-espionage networks, 7 has emphasized the Impact of cyberspace on the 
sweuf and muscle aspects of war fighting, and geopolitical competition among states 
and nonstate actors. Reflecting on these recent Incidents, many states’ armed forces 
and policymakers have engaged in a fundamental rethinking of assumptions about 
the Importance of the informational domain to conflict and competition- As a conse- 
quence, states are now openly pursuing a cyber arms race with leading powers such as 
the United States, Russia, and China unashamedly making their Intentions dear In 
doctrines for military engagement in cyberspace. The quest for Information control is 
now beyond denial. 

The present volume alms to document, analyze, and explore these emerging next- 
generation techniques, what they mean for relationships between citizens and states, 
and how they will shape cyberspace as a domain for civic Interaction into the future. 
The title of our volume— Access Controlled: The Shaping of Rosser. Rights, and Ride In 
Cyberspace — suggests how the center of gravity of practices aimed at managing cyber- 
space has shifted subtly from policies and practices aimed at denying access to content 
to methods that seek to normalize control and the exercise of power In cyberspace 
through a variety of means. 

This volume differs from Its predecessors in two ways. First, our focus Is primarily on 
the 56 countnes that make up the OSCE. This Is a deliberate choice, as many of the 
legal mechanisms that legitimate control over cyberspace, and Its militarization, are 
led by the advanced democratic countries of Europe and North America, likewise, 
many of the more Innovative means by which laws and techniques used to silence 
voices In cyberspace are emerging from the postcommunist countries of the Common- 
wealth of Independent States (CIS). In this respect, the Industrialized North Is estab- 
lishing norms that are only too readily propagated and adopted by repressive and 
authoritarian regimes elsewhere. 

Second, Access Controlled focuses on the new generations of Internet controls that go 
beyond mere denial of Information. Whereas Chlnese-style national filtering schemes 
represent the first generation of Internet filtering, second- and third-generation techni- 
ques are more subtle, flexible, and even offensive in character. These next-generation 
techniques employ the use of legal regulations to supplement or legitimize technical 
filtering measures, extralegal or covert practices. Including offensive methods, and the 
outsourcing or privatizing of controls to "third parties," to restrict what type of Infor- 
mation can be posted, hosted, accessed, or communicated online. Examples of next- 
generation techniques Include the Infiltration and exploitation of computer systems 
by targeted viruses and the employment of distributed denial -of-servlce (DDoS) attacks, 
surveillance at key choke points of the Internet's Infrastructure, legal takedown 
notices, stifling terms-of -usage policies, and national information-shaping strategies, 
all of which are highlighted In one way or another in the chapters that follow. Al- 
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though these measures may haw the same aim as Chlnese-style filtering, they reflect a 
maturation of methods resulting from a growing colonization of cyberspace by states 
and other actors. They emerge from a desire to sluipe and influence as much as tightly 
control national and global populations that are Increasingly reliant on cyberspace as 
their main source of Information. These next-generation controls raise Important and 
sometimes troubling public policy Issues — particularly for the relationship between 
citizens and states. 

Chapter Overview 

Second- and third-generation controls are carefully defined in our subsequent chapter 
In this volume, Control and Subversion In Russhm Cyberspace. Second-generation con- 
trols create a legal and normative environment and technical capabilities that enable 
actors to deny access to Information resources as and when needed, while reducing 
the possibility of blowback or discovery. These controls have an overt and covert track. 
The overt track alms to legalize content controls by specifying the conditions under 
which they can be denied. Instruments here Include the doctrine of information secu- 
rity as well as the application of existent laws, such as slander and defamation, to the 
online environment. The covert track establishes procedures and technical capabilities 
that allow content controls to be applied "|ust In dme," when the Information being 
targeted has the highest value (e.g., during elections or public demonstrations), and to 
be applied In ways that assure plausible denlablllty. 

Third-generation controls take a highly sophisticated, multidimensional approach to 
enhancing state control over national cyberspace and building capabilities for compet- 
ing In informational space with potential adversaries and competitors. The key charac- 
teristic of third-generation controls is that the focus Is less on denying access than 
successfully competing with potential threats through effective counterinformation 
campaigns that overwhelm, discredit, or demoralize opponents. Third-generation con- 
trols also focus on the active use of surveillance and data mining as means to confuse 
and entrap opponents. 

We argue that while the countries of the CIS are often seen as lagging behind Eu- 
rope, North America, and the technological tigers of Asia, they may be leaders In the 
development of next-generation controls. Some of the first, and most elaborate, forms 
of just-ln-tlme blocking, terms-of-usage policies, surveillance, and legal takedown no- 
tices occurred among the countries of the CIS over the last several years. Examining that 
region In detail may give us Insight into the future of Information controls elsewhere. 

Computer network attacks and exploitation — what w'e called "|ust-ln-tlme" blocking 
In Access Denied — are perhaps the starkest of examples of next-generation techniques. 
Computer network attacks describe the range of controls that target and "take down" 
strategically Important sources of Information or services at key moments In time 
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through computer-based information attacks. Although there are several tactics that 
can be employed within this rubric — deliberate tampering with domain name servers, 
virus and Tro|an horse Insertion, and even brute physical attacks — the most common 
Is the use of DDoS attacks. These attacks flood a server with Illegitimate requests for in- 
formation from multiple sources — usually from so-called "zombie" computers that are 
Infected and employed as part of a "botnet." The ONI has monitored an Increasing 
number of |ust-ln-tlme blocking Incidences using DDoS attacks, going back to our first 
acquaintance dunng the Kyrgyzstan parliamentary elections of 2005. In that episode, 
the Web sites of opposition newspapers came under a debilitating attack that left 
them unable to communicate dunng the cntlcal period leading up to and dunng the 
Kyrgyz election.’ Since the Kyrgyz case, DDoS attacks have featured prominently In 
the dispute between Russia and Estonia In May 2007, dunng the Russla-Georgla con- 
flict of 2008, and In numerous cases Involving the Web sites of human nghts and po- 
litical opposition groups. 

These tactics are particularly difficult to monitor using traditional ONI methods 
because of their temporary and fleeting duration, and because their perpetrators can 
disguise their Involvement through dlstnbutlon and anonymity. Today, organized 
criminal networks operate commercial botnets with significant powers of disruption. 
Perpetrators can simply contract out a DDoS attack and benefit by the convenience of 
an electronic assault that from the outside may look as though It Is a random attack or 
a series of unfortunate network errors. Attributing such attacks to their source Is diffi- 
cult because the vectors are distributed and the transactions are done through criminal 
activity and Illicit shadow markets. Although much of what the ONI has observed in 
terms of computer network attacks and |ust-ln-tlme blocking has occurred In the devel- 
oping world. It Is noteworthy the military use of botnets Is being debated In NATO 
countries and elsewhere. 9 The prospect of an arms race In cyberspace looms large. 

Among many countries in the Industrialized world, a major Impetus to filter Is the 
desire to control access to information relating to the sexual exploitation of children, 
otherwise known as child pornography. In almost all counthes, possession and dlstn- 
butlon of child pornography Is Illegal. In some countttes, laws have been enacted to 
restrict dlstnbutlon of child pornography online. In some countries, prtvate ISPs have 
entered Into voluntary arrangements to filter access to fists of child pornographic ma- 
terial, while In others entire nationwide filtenng schemes have been proposed. In all 
cases, the proposals have been the subject of considerable public debate and contro- 
versy. Although only a few very extreme minority groups, such as llbenartans. ques- 
tion the nght to access child pornography, many have raised questions about the 
transparency of the processes being followed or the mechanisms put In place for over- 
sight and review. For the ONI, for example, the mere test for access to this material is 
prohibited because a simple connection to such a site would constitute a enme In most 
Jurisdictions. This situation leaves many researchers In a quandary as to how to verify 
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that lists are accurate and do not contain collateral filtering problems or categorization 
mistakes common to filtering software. N'art Vllleneuve’s chapter provides a historical 
overview of online child pornography controls and examines the range of policy 
responses that have been employed. As VUleneuve explains, many governments have 
adopted national filtering policies rather than developing International Information- 
sharing arrangements that would Involve police cooperation and the removal of Infor- 
mation at Its source. 

Another example of next-generation information controls prominent among the 
countries of the OSCE Is the extensive use and application of surveillance. As Hal Rob- 
erts and John Palfrey outline In their chapter, surveillance can happen at numerous 
points throughout the infrastructure of cyberspace and can be collected by a variety 
of public and private actors who have access to those choke points. States’ Intelligence 
and law enforcement agencies are Increasingly extracting precious information flows 
through the installation of permanent eavesdropping equipment at key Internet choke 
points, such as Internet exchanges, ISPs, or major International peering facilities, and 
combining such Information with new tools of reconnaissance drawn from data 
sources such as CCTVs, satellite imagery, and powerful systems of geo-locatlonal map- 
ping. To be sure, electronic surveillance Is nothing new, having a long history 
shrouded with secrecy. Throughout the cold war. both superpowers assembled globe- 
spanning electronic surveillance systems that operated In the most highly classified 
realms. However, today's surveillance systems are much more extensive and penetrat- 
ing. and are legitimized by permissive antiterror legislation that removes many previ- 
ous operational constraints. They are also Increasingly operated and controlled not by 
the state but by private actors. As with just-ln-tlme blocking, surveillance eludes the 
ONI's methods and Is generally quite difficult to monitor using technical means. It Is, 
however, a very powerful force of Information control and can create a stifling climate 
of self-censorship. 

Another control beyond denial that Is profiled In Access Cemtrolled relates to the 
growing and widespread prevalence of cyberspace as a communications environment, 
and the ways In which third-party Intermediaries, including private companies and 
public institutions, host, service, and ultimately control that environment. At one 
point In time. It might have been fair to characterize cyberspace as largely a separate 
and distinct realm — something people "enter Into" when they turn on their com- 
puters or play video games. Today, however, with always-on portable devices that are 
fully connected to the Internet, and much of society's transactions mediated through 
Information and communication technologies — including business, work, government, 
and play — cyberspace Is not so much a distinct realm as It Is the very environment we 
Inhabit. Our lives have been digitally disassembled, disaggregated, and dispersed Into 
multiple digital domains. Our “private" Information now traverses through cables and 
spectrum owned and operated by numerous private and public Institutions located in 
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numerous legal jurisdictions. The same Is true of government and business Informa- 
tion. It Is hosted on servers each of which may have unique terms-of-servlce, data- 
retentlon. and use policies. Depending on the territorial jurisdiction In which they are 
located, they may be subject to the pressures of law enforcement and Intelligence to 
turn over that information, either overtly or covertly. And they are subject to a be- 
wildering variety of local, national, and International laws, some of which may 
conflict. 

Issues of censorship that involve terms-of-use policies, takedown notices, and other 
commercial compliance and service Issues are taken up In both the Ethan Zuckerman 
and Colin Maclay chapters. Zuckerman outlines some of the ways In which competi- 
tive market forces can create unintended consequences leading to censorship by ISPs 
and online service providers (OSPs). Unwilling or afraid to bear the burden of legal 
and other costs of hosting controversial information, ISPs and OSPs may simply err on 
the side of caution, leading to a situation where the spaces for hosting content deemed 
objectionable anywhere are progressively winnowed. As much of what happens online 
today, from e-mail to documentation to chats, flows through or otherwise depends on 
these large "cloud" services managed by private companies, such a chilling effect could 
have profound consequences on freedom of speech and access to Information. 

Maday's chapter focuses on Issues of accountability and transparency around OSPs 
and ISPs that operate or provide services In jurisdictions where Internet censorship 
takes place. In many countttes, Internet companies are either pressured or legally com- 
pelled to censor their services or turn over user data, with search engines being among 
the most common of them. In China, for example, major search engine companies all 
filter their search results, and at least one has turned over personal data to Chinese 
authorities, resulting In arrests. These practices have garnered significant controversy, 
particularly In the United States where the largest of them— Microsoft. Yahoo!, Goo- 
gle — are based. In an effort to forestall legislation that would restrict their Investment 
practices abroad, these companies have entered Into a self-regulation pact, called the 
Global Network Initiative, which Maclay analyzes and discusses. Given that much of 
cyberspace Is operated by the pnvate sector, such self-regulation pacts may become a 
more common feature of cyberspace governance, as will undoubtedly the policing of 
Internet content controls. 

Conclusion 

The trends and findings analyzed In Access Controlled reveal a rapidly emerging norma- 
tive terrain that should be of concern to policymakers, advocacy and fights networks, 
and academics. Given the strategic Importance of the OSCE. In terms of relative mili- 
tary capabilities, wealth, and diplomatic influence, the norms emerging from this re- 
gion are bound to have unintended consequences all over the world. Understanding 
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those Impacts will be of pai amount importance for Internet governance at all levels in 
years to come. 

Probably the most important norm is the "security first" orientation toward Internet 
governance, driven in part by the fear of terrorism and In part by concerns of protect- 
ing vulnerable populations (particularly’ children) from exploitation. Across the OSCE, 
communities of practice in law enforcement, intelligence, and the private sector are 
working, often in uncoordinated, discrete, but like-minded ways, leading to a normal- 
ization of Internet surveillance and censorship across all sectors of cyberspace. It Is per- 
haps Ironic that these norms so antithetical to basic rights and freedoms are being 
propagated from many countries that |ust os'er a decade ago were responsible for the 
expansion of liberal democratic principles and market capitalism across the globe. 
And yet upon closer consideration such trends conform to what have been called "gov- 
ernmentallty practices" In general that characterize these societies, as techniques of 
control become progressively more refined, technologically rigorous, and bureaucrati- 
cally complex. Although not "socially sinister," as David Lyons puts It, what he calls 
"everyday surveillance" has routlnlzed Itself Into ordinary life In so many myriad 
ways that It has become the taken-for-granted context within which modern Industri- 
alized society operates . 10 The security-first norm around Internet governance can be 
seen, therefore, as but another manifestation of these wider developments. Internet 
censorship and surveillance — once largely confined to authoritarian regimes — Is now 
fast becoming the global norm. 

But there Is a second characteristic of this newly emerging normative terrain that Is 
unique to cyberspace and the speed with which such changes are being wrought, in 
particular to the long-standing pillars of modern citizen-state relations. The "social 
contract" that has set the basic framework for citizen-state relations In the modern 
Industrialized period has been shaped by decades of technological and social change 
and Institutional Innovations. One must be careful, therefore, to ascribe to contempo- 
rary events unique and epochal challenges. However, the way In which citizen-state 
relations are being upset in a very compressed time frame Is worth noting, and may 
be comparable only to that which happened at the height of the industrial revolution 
Itself. In such a context of rapid technological and social change, the margin for error 
and unintended consequence around laws and regulations Is enormous as path 
dependencies open up around fast-moving developments that only In hindsight can 
be Identified as such. 

The salience of such Impacts can be seen in the practices surrounding the distributed 
ownership Infrastructure of cyberspace. Today, peoples' everyday lives are mediated not 
only through the state per se, but dispersed through douds of digital-electronic tele- 
communications owned and operated by private entitles. Each of these clouds — often 
spanning multiple national jurisdictions — represents potential, and often actual, loci 
of private authority. As shown throughout each of the chapters in this volume, the 
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decisions they make on when to retain, filter, monitor, and share the Information they 
control (and with whom) are increasingly having Important political ramifications for 
citizens the world over. The normative terrain outlined In Access Controlled thus oilers a 
compelling example of the privatization of authority. 

Perhaps the most Important unintended consequences may come from new conflicts 
and offensive operations documented In this volume. The growing acceptance of 
the militarization of cyberspace, by states and by third-party actors, risks significant 
blowbacks as these techniques — once hidden from view or confined to marginalized 
contexts — become an entrenched characteristic of global relations. Societies around 
the world— none more so than those of the OSCE — are heavily dependent on globally 
networked technologies. They have been locked In and interpenetrated by a digital 
web of their own spinning." And so from a rational perspective, an arms race In cyber- 
space Is to no one’s advantage; a collapse of one Information Infrastructure would 
undoubtedly affect others — perhaps even the perpetrator. But as so often is the case In 
the competitive dynamics of world politics, the logic of security dilemmas can easily 
overwhelm and entrap rational declslon-maklng processes. Today, governments are 
responding to the threats of cyberwar not by pursuing norms of mutual restraint 
but by endorsing new techniques of offensive operations, Including outsourcing to 
third-party actors and criminal organizations. 

Last, this newly emerging normative terrain of next-generation Internet controls 
presents ma)or challenges to monitoring organizations, including the ONI Itself. The 
technical Investigations that informed our country studies and that are reported on 
here represent a methodology borne out of the need to monitor first-generation tech- 
nical filtering techniques. If the trends Identified in Access Controlled are accurate, then 
these first-generation filtering techniques may be gradually superseded by a variety of 
next-generation controls that are more subtle and fluid and deeply Integrated Into 
social relations rather than fixed at specific choke points. This possibility suggests that 
the ONI Itself must now respond with a new suite of methodologies If It hopes to re- 
main relevant to the challenges of cyberspace governance that lay ahead. 
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Introduction 

It has become a truism to link censorship In cyberspace to the practices of authorltar- 
lan regimes. Around the world, the most repressive governments — China, Burma, 
North Korea, Cuba. Saudi Arabia— are the ones that erect digital firewalls that restrict 
citizens' access to information, filter political content, and stymie freedom of speech 
online. When we turn to the countries of the former Soviet Union — Russia and the 
Commonwealth of Independent States (CIS)— we should expect no different. The Eco- 
nomist index of democracy paints a bleak picture of political freedoms in the CIS (see 
Table 2.1; numbers represent the country's rank In the world). 1 Only two countries, 
Ukraine and Moldova, rank as flawed democracies , with the remaining 10 countries of 
the region described as either hybrid regimes or authoritarian. 

Throughout the CIS, this creeping authoritarianism is evident In |ust about every 
facet of social and political life. Independent media are stifled, journalists Intimidated, 
and opposlUon parties and civil society groups harassed and subject to a s’arlety of suf- 
focating regulations. And yet, in spite of this increasingly constrained environment, 
the Internet remains accessible and relatively free from filtering. The ONI has tested 
extensively through the CIS region, far deeper and more regularly in fact than In any 
other region in the world. To date we have documented traditional "Chlnese-style" 
Internet filtenng — the deliberate and static blocking of Internet content and services 
by state sanction — only In Uzbekistan and Turkmenistan. For the rest of the region, 
while connectivity may be poor and unreliable, and suffer from the usual rent-seeking 
distortions found in other developing country environments, the same basic content is 
available there as In the most open country contexts. 

In our chapter, we explore this seeming dls|uncture between authoritarianism In the 
CIS and the relative freedom enjoyed In Russian cyberspace, commonly known as 
RUNET. We argue that attempts to regulate and impose controls over cyberspace in 
the CIS are not necessarily absent (as ONI testing results may suggest) but are different 
than in other regions of the world. We hypothesize that CIS control strategies have 
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Table Z1 


1 INDEX OF DEMOCRACY h 

Less Authoritarian 

World Ranking 


Ukraine 

53 


Moldova 

62 

Flawed democracy 

Georgia 

104 


Russia 

107 


Armenia 

113 

Hybrid regime 

Kyrgyzstan 

114 


Kazakhstan 

127 


Belarus 

132 


Azerbaijan 

135 

Authoritarian 

Tajikistan 

150 


Uzbekistan 

164 


Turkmenistan 

165 


More Authoritarian 


Soune. The Econotrist Inlelgence Unit. "The Economist Intelligence Unit's Index ot Democracy 2008." 
2008. M»p:/i l graphia.e*i.comfPDF/Democracy%2andex%202008.pdt. 


evolved several generations ahead of those used In other regions of the world (Includ- 
ing China and the Middle East). In RUNET, control strategies tend to be more subtle 
and sophisticated and designed to shape and affect when and how information Is 
received by users, rather than denying access outright. 

One reason for this difference may be the prior experiences of governments and op- 
position groups in the region. State authorities are aware of the Internet's potential for 
mobilizing opposition and protest that goes far beyond the nature of content that can 
be downloaded from Web sites, chat rooms, and blogs. These technologies have the 
potential to enable regime change, as demonstrated by the eponymous color resolutions 
In Ukraine, Georgia, and Kyrgyzstan. By the same token, state actors have also come to 
recognize that these technologies make opposition movements vulnerable, and that 
disruption, Intimidation, and disinformation can also cause these movements to frag- 
ment and fall. The failure of opposition movements In Belarus and Azerbaijan to Ignite 
a wider social mobilization, along with the role that targeted information con- 
trols played in fragmenting and limiting the effectiveness of these movements, also 
points to the possible trajectory In which controls aimed at Russian cyberspace may 
be moving. 

Our chapter unfolds In several steps. We begin by descnblng some of the unique 
characteristics of the "hidden" Information revolution that has taken place In Russian 
cyberspace since the end of the cold war. Contrary to widespread perceptions outside of 
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the region. Russian cyberspace Is a thriving and dynamic space, vital to economics, 
society, and politics. Second, we outline three generations of cyberspace controls that 
emerge from the research conducted by the ONI In this region. First-generation 
controls — so-called Chlnese-style filtering — are unpopular and infrequently applied. 
While instances of filtering have been identified In |ust about all CIS countries, wide- 
scale national filtering Is only pursued as a matter of state policy in two of the CIS 
states. Rather, Information control seems to be exercised by way of more subtle, 
hidden, and temporally specific forms of denial. These controls can Involve legal 
and normative pressures and regulations designed to Inculcate an environment of 
self-censorship. Others, like denlal-of-servlce attacks, result In Web sites and services 
becoming unavailable, often during times of heightened political activity. Still others, 
like mass blogging by political activists on opposition Web sites, cannot be character- 
ized as an attack per se, although the outcome of silencing these Web sites Is as effec- 
tive as traditional filtenng (If not more so). 

These second- and third-generation controls are Increasingly widespread, and they are 
elusive to traditional ONI testing methods. They are difficult to measure and often re- 
quire ln-depth fieldwork to verify. Consequently, many of the examples In this chapter 
are based on field investigations carried out by our ONI regional partners where techni- 
cal testing was used to establish the characteristics of controls, rather than measure the 
extent of them. We hypothesize that, although these next-generation controls 
emerged in the CIS, they may In fact be Increasingly practiced elsewhere. In the next 
section of the chapter we turn our lens beyond the CIS to find examples of second- and 
third-generation controls. 

We conclude by arguing that, contrary to Initial expectations, first-generation filter- 
ing techniques may become Increasingly rare outside of a few select content categories, 
raising serious public policy Issues around accountability and transparency of Informa- 
tion controls In cyberspace. The future of cyberspace controls, we argue, can be found 
in RUNET. 

RUNET 

On July 6, 2006, Russian President Vladimir Putin fielded questions from the Internet 
at an event organized by the leading Russian Web portal Yandex. 2 It was the first time 
a Russian leader directly engaged and Interacted with an Internet audience. The event 
Itself made few headlines In the International media, but In Russia It marked an Impor- 
tant milestone. The Internet had graduated to the mainstream of Russian politics and 
was being treated by the highest levels of state authohty as equal in importance to tele- 
vision, radio, and newspapers. The question put to President Putin by the Internet au- 
dience also revealed a sense of the Informal, Irreverent culture of Russian cyberspace. 
Over 5,640 netiiens wrote in to ask when the President first had sex. More surprising, 
perhaps, was that Putin replied. 1 
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The rise of the Internet to the center of Russian culture and politics remains poorly 
understood and insufficiently studied. With the end of the cold war and the demise of 
the USSR, Russia and the CIS entered Into a long period of decline. Economies stag- 
nated, political systems languished, and the pillars of superpower status — military 
capacities and advanced scientific and technological potential — rapidly ebbed away. 
Overnight, the CIS become less relevant and dynamic. The precipitously declining 
population rates In the Slavic heartland, a wholesale free-for-all of mu/tyu-led priva- 
tization. growing Impoverishment, and falling public infrastructure, all made the dis- 
tant promise of a knowledge revolution led by Information technologies seem highly 
Improbable. 

Moreover, the prospects for Russia and the CIS keeping up with the Internet and 
telecom boom of the late 1990s and early 2000s seemed, for many, a distant reality. 
By the time the USSR finally collapsed In 1991, It had the lowest teledensity of any 
Industrialized country. Its capacity for scientific development, particularly in the field 
of PCs (which the USSR had failed to develop) and computer networking (which was 
based on reverse-engineered systems pirated from European countries) was weak 
to nonexistent. Moreover, Russian seemed to be a declining culture and language 
as newly independent CIS countries adopted national languages and scripts, and 
preferred to send their youth to study at Western institutions. In almost every ma)or 
Indicator of economic progress, political reform, scientific research, and telecommuni- 
cations capacity, the countries of the CIS seemed headed for the dustheap of history. 
Not surpnstngiy, scholarly and policy Interest In the effects and Impact of the Informa- 
tion revolution in the CIS waned, as attention focused on the rising behemoths In Asia 
(particularly China and India), and the need and potential of bndglng the digital divide 
in Africa and the Middle East. And yet, during the last decade the CIS has undergone a 
largely unnoticed Information revolution. Between 2000 and 2008 the Russian portion 
of cyberspace, or RUNET, which encompasses the countries of the CIS, grew at an aver- 
age rate of 7,208 percent, or over five times the rate of the next faster region (Middle 
East) and IS times faster than Asia (see Table 2.2). 

More than SS million people are online In the CIS, and Russia Is now the nlnth- 
largest Internet country In terms of Its percentage of world users, |ust ahead of South 
Korea. 4 By latest official estimates, 38 million Russians, or a thud of the population of 
the Russian Federation, are connected, with over 60 percent of those surfing the Inter- 
net from home on broadband connections. And these figures may be low. Russian 
cyberspace also embraces the global Russian diaspora that, through successive waves 
of emigration, Is estimated at above 27 million worldwide. Many Russian dmlgrts re- 
side In developed countries, but tend to live online In the RUNET. Statistics to back 
this claim are methodologically problematic, but anecdotal evidence suggests that this 
Is the case. Hie popular free mall service mall.ru, for example, boasts over SO million 
user accounts, suggesting that the number of Inhabitants in Russia cyberspace may 
be significantly above the 57 million users resident In the CIS. And these figures are 
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Table 2^ 


1 PROFILE OF INTERNET USE. PENETRATION, AND GROWTH IN THE OS fl 

Country 

Population 

(2008) 

Number of 

Internet Users 

Internet 

Penetration (2008) 

Internet Growth 
(2000 2006) 

Armenia 

2.968.586 

172.800 

5.8% 

476% 

Azerbaijan 

8,177.717 

1.500.000 

18.3% 

12.400% 

Belarus 

9.685.768 

2.809.800 

29% 

1.461% 

Georgia 

4.630,841 

360,000 

7.8% 

1.700% 

Kazakhstan 

15,340,533 

1.900.600 

12.4% 

2.615.1% 

Kyrgyzstan 

5,356.869 

750,000 

14% 

1.353.5% 

Moldova 

4,324,450 

700,000 

162% 

2.700% 

Tajikistan 

7.211,884 

484,200 

6.7% 

24.110% 

Turkmenistan 

4,829,332 

70,000 

14% 

3.400% 

Russia 

140.702,094 

38,000,000 

27% 

1,125.8% 

Ukraine 

45,994,287 

6.700,000 

14.6% 

3.250% 

Uzbekistan 

27,345,026 

2.400,000 

8.8% 

31,900% 

Totals 

267,567,387 

55.847,400 

20% (average 13.5%) 

7,208% 


Source: Mnnvatts Marketing Croup. 'Internet World Statistics. 2009/' http:^vwvr.intemetwridstats 
.com. 


set to rise — dramatically. By official predictions, Russia's Internet population Is set to 
double to over 80 million users by 2012. s 

Paradoxically, the very Russianness of the RUNET may have contributed to hiding 
this "cyber revolution." Unlike much of the Internet, which remains dominated by 
English and dependent on popular applications and services that are provided by U.S.- 
based companies (such as Google. Yahoo, and Hotmail), RUNET Is a self-contained lin- 
guistic and cultural environment with well developed and highly popular search 
engines, Web portals, social network sites, and free e-mail services. These sites and ser- 
vices are modeled on services available in the United States and the English-speaking 
world but are completely separate. Independent, and only available In Russian.® In a 
recent ranking of Internet search engines, the Russian Web portal Yandex was one of 
only three non-English portals to make the top ten, and was only beaten out by a Baidu 
(China) and NHK (Korea), both of which have much larger absolute user base.' Within 
RUNET, Russian search engines dominate with Yandex (often called the Google of 
Russia), beating out Google with 70 percent of the market (Google has between 18 
and 20 percent). 8 

The RUNET Is also increasingly central to politics. Elections across the CIS are now 
fought online, as the Internet has eclipsed all the mass media in terms of Its reach, 
readership, and especially In the degree of free speech and opportunity to mobilize 
that It provides. By 2008, Yandex could claim a readership larger than that of the 
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popular mainstream newspapers Izvestia, Komsomolskaya Pravda. and Motkovsky Kotnso- 
moltls combined.’ The Russian-language btogosphere — which currently makes up 3 per- 
cent of the world’s 3.1 million blogs — grows by more than 7,000 new blogs per day. 10 
There are currently more Russian-language blogs than there are French, German, or 
Portuguese, and only marginally fewer than Spanish," which Is spoken by a larger per- 
centage of the world population. 12 

This shift has been fueled as much by the growing state control over the traditional 
mass media as it has been by the draw of what the new online environment has to 
oiler. Well-known journalists, commentators, and political figures have all turned 
to the RUNET as the off-line environment suffers through more severe restrictions and 
sanctions. Across the CIS, especially In the Increasingly authoritarian countries of 
Uzbekistan, Belarus, and Kazakhstan, the RUNET has become the last and only refuge 
of public debate. Given Its rapid ascent to the popular mainstream, It Is paradoxical — 
and certainly a puzzle— that RUNET has elided filtering controls of the kind Imposed 
by China on Its Internet in all but a few countries. In the next section, we explore 
why that Is the case. 

Next-Generation Information Controls In the CIS 

Although RUNET Is a wild hive of buzzing online activity, it Is not completely unregu- 
lated. Since Its emergence In the early 1990s, RUNET has been sublect to a variety of 
controls. Some controls have been commercial In motivation and represent crude 
attempts to use formal authority to create what amounts to a monopoly over secure 
communications and as means to seek rents. 11 Tills form of control has not been 
unique to RUNET and has extended to every other facet of post-Soviet life, from car 
registration through to the supply of gasoline, as an aspect of the great scramble to 
pnlnatiiatsta public assets that occurred during the early to mid 1990s. 14 Other con- 
trols have emerged from a legal system Inherited from the Soviet era. which criminal- 
ized activities without necessarily seeking prosecution, except selectively. These forms 
of control effectively form the rules of the game for all Informal networks. Their emer- 
gence In the virtual online world of the RUNET Is transparent and natural. 

But during the late 1990s, and especially following the color revolutions that swept 
through the CIS region, states began to think seriously about the security implications 
of RUNET, and In particular its potential to enable mobilization of mass social unrest. 
The first attempts at formally controlling cyberspace were legal, beginning with legis- 
lation enabling surveillance (SORM-U), ,s and later in 2001 with the publication of 
Russia's Doctrine of In formation Security. While the doctrine addressed mass media and 
did not focus on RUNET specifically. It declared the Information sphere to be a vital 
national asset that required state protection and policing. The doctrine used strong lan- 
guage to describe the state's right to guide the development of this space, as well as Its 
responsibility to ensure that information space respects "the stability of the consdtu- 
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tlonal order, sovereignty, and the territorial Integrity of Russian political, economic 
and social stability', the unconditional ensuring of legality, law and order, and the de- 
velopment of equal and mutually beneficial international cooperation." 16 

The intent of the doctrine was as much International as It was domestic, establishing 
demarcated borders In cyberspace, at least In principle. The International Intent of the 
doctrine appears to have been driven by a growing concern that Russia was falling be- 
hind Its major adversaries in developing a military capability in cyberspace; efforts by 
countries such as the United States, China, India, and others to des'elop covert com- 
puter network attack capabilities risked creating a strategic Imbalance. 1 ' Domestically, 
the doctrine was aimed at the use of the Internet by militant groups to conduct Infor- 
mation operations, spec Ideally the Chechen insurgency. Within a few years, most 
other CIS countries had followed suit, adopting variations of the Russian doctrine. 

ONI Tests for Internet Controls In RUNET 

The controls outlined previously are qualitatively different from the usual types of con- 
trols for which the ONI tests. Establishing empirical evidence of the effects of policies 
like SORM and the Doctrine of Information Security Is challenging, since their applica- 
tion Is largely contextual, their impact at times almost metaphysical. Such controls do 
not yield a technological "fingerprint" in the way that a filtering system blocking ac- 
cess to Internet content does. However, they may be |ust as effective, If not more so. 
In achieving the same outcomes. In Its 2007 study of the policy and practice of Inter- 
net filtering, the ONI found that substantial and pervasive attempts to technically filter 
content on RUNET did not begin until 2004, and even then were isolated to Turkmeni- 
stan and Uzbekistan, with lesser attempts at filtenng found In most other CIS countries 
(see Table 2.3) 18 

These reports have remained consistent In more recent rounds of ONI tests. And yet 
persistent imecdotal reports, as well as special monitoring efforts mounted by the ONI, 
reveal In the majority of CIS countries that Information denial and access shaping Is 
occurring, and on a significant scale, especially around cntlcal events such as elections. 
The ONI carried out a number of special Investigations, Including mounting monitor- 
ing efforts dunng the 2005 parliamentary elections in Kyrgyzstan 1 ’ and the March 
2006 Belarus presidential elections. 2 " These efforts yielded the first technically verified 
results that the RUNET was being deliberately tampered with to achieve a political 
effect. 

The results obtained by ONI in the CIS are unique, and they differ significantly 
from the results obtained In ONTs global survey. They demonstrate that Informa- 
tion controls In the CIS have developed in different ways and using different tech- 
niques than those found In other areas of the world. They suggest a much more 
sophisticated approach to managing networks through denial that Is highly selective 
and event based, and that shapes access to the sources of information and means of 
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Table 2.3 


SUMMARY RESULTS FOR ONI TESTING FOR INTERNET FILTERING, 2007-2008 


No Evidence Suipected Selective Substantial Pervasive 



communication In a manner that could plausibly be explained by errant technical fail- 
ures or other random network effects. In the following sections, we define the three differ- 
ent generations of cyberspace controls and provide examples for each from our research 
In the CIS region. The three generations of controls are also summarized In Table 2.4. 

First-Generation Controls 

First-generation controls focus on denying access to specific Internet resources by 
directly blocking access to servers, domains, keywords, and IP addresses. Tills type of 
filtering Is typically achieved by the use of specialized software or by Implementing 
Instructions manually Into routers at key Internet choke points. First-generation filter- 
ing Is found throughout the world, in particular among authoritarian countries, and Is 
the phenomenon targeted for monitoring by the ONl’s methodology. In some coun- 
tries, compliance with first-generation filtering Is checked manually by security forces, 
who physically police cybercaffs and ISPs. 

In the CIS, first-generation controls are practiced on a wide scale only In Uzbekistan 
and Turkmenistan. In Uzbekistan, a special department of the SNB (KGB) monitors the 
Internet and develops block lists that are then conveyed to Individual ISPs who In turn 
Implement blocking against the specific resources or domain names. The filtertng is 
universal across all ISPs, and the SNB spot-checks ISPs for compliance. In Turkmenis- 
tan, filtenng Is centralized on the country’s sole ISP (operated by Turkmentelekom), 
and access Is heavily filtered. Up until late 2007, Internet access In Turkmenistan was 
severely restricted and expensive, limiting Its access and Impact. 
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A second practice associated with first-generation blocking Is policing and surveil- 
lance of Internet cafes. In Uzbekistan, SNB officers monitor Internet cafes, often enlist- 
ing cafe owners to notify them of Individual users who try to access "banned" sites. 
Many Uzbek Internet cafes now openly post notices that Mewing Illegal sites Is sub|ect 
to fine and arrest. On several occasions, ON'l researchers have manually verified the 
surveillance. 

Second-Generation Controls 

Second-generation controls aim to create a legal and normative environment and 
technical capabilities that enable state actors to deny access to Information resources 
as and when needed, while reducing the possibility of blowback or discovery. Second- 
generation controls have an overt and a covert track. The overt track alms to legalize 
content controls by specifying the conditions under which access can be denied. 
Instruments here include the doctrine of information security as well as the applica- 
tion of existent laws, such as slander and defamation, to the online enMronment. Tlie 
covert track establishes procedures and technical capabilities that allow content con- 
trols to be applied "|ust In time," when the information being targeted has the highest 
value (e.g., during elections or public demonstrations), and to be applied In ways that 
assure plausible denlablllty. 

The legal mechanisms used by the overt track vary from country to country, but 
most share the characteristic of establishing double Jeopardy for RUNET users, making 
requirements such that compliance sets the grounds for prosecution, and noncompli- 
ance establishes a legal basis for sanction. 

The following are among the more common legal mechanisms being applied: 

Compelling Internet sites to register with authorities and to use noncompliance as 
grounds for taking down or filtering "Illegal" content, and possibly revoking service 
providers' licenses. This tack is effectively used In Kazakhstan and Belarus, and It is 
currently being considered in Russia. The mechanism Is particularly effective because 
It creates multiple disincentives for potential Web site owners who must go through 
the hassle of registering with authorities, which leaves them open to legal sanction 
should their site be deemed to be carrying Illegal content. It also creates double Jeop- 
ardy for International content providers (such as the BBC, CNN, and others) and opens 
the question whether they should register their services locally. In practice, the regis- 
tration requirement applies to them so long as their audience Is local, and a failure to 
comply leaves open the option to filter their content for "noncompUance" with local 
registration requirements. On the other hand, registering would make the content they 
carry subject to local laws, which may deem their content "unacceptable" or "slander- 
ous" and could lead to legally sanctioned filtering. 
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Strict criteria pertaining to what Is '"acceptable" within the national media space, lead- 
ing to the de-reglstratlon of sites that do not comply. In Kazakhstan, opposition 
Web sites or Web sites carrying material critical of the government are regularly de- 
registered from the national domain. This Includes a large number of opposition sites 
and, notably, the Boral Web site, ostensibly because the owners of the site were not res- 
ident in Kazakhstan as required by the Kazakh domain authority. In Belarus, the popu- 
lar portal tut.by refused to put up banners advertising opposition Web sites, possibly 
for fear of reprisals (although those fears were not made explicit). 21 
Expanded use of defamation, slander, and "veracity" laws, to deter bloggers and Inde- 
pendent media from posting material critical of the government or specific govern- 
ment officials, however benignly (Including humor). In Belarus, slander laws were 
used to prosecute an owner of a Web site posting cartoons of the president. In both 
Belarus and Uzbekistan, the law on mass media requires that reporting passes the "ob- 
jectivity test." Journalists and editors are held responsible for the "veracity" of publica- 
tions and postings, leading to a high degree of self-censorship. In Kazakhstan, there are 
several cases of oppositional and Independent media Web sites being suspended for 
providing links to publications about corruption among senior state offices and the 
president. 

Evoking national security concerns, especially at times of clvk unrest, as the Justification 
for blocking specific Internet content and services. Most recently, this Justifica- 
tion was evoked In Armenia when the opposition demonstrations that followed the 
February 2008 presidential elections turned to violence leading to the death and Injury 
of several dozen protesters. A 20-day state of emergency was declared by President 
Kocharian, which also led to the de-reglstratlon of popular Armenian political and 
news sites, including a site carrying the Armenlan-language BBC service and the filter- 
ing of YouTube (ostensibly because of allegations that footage of the rioting had been 
posted to the popular video sharing site). 22 Similar filtering occurred during the Russlan- 
Georglan crisis of 2008 when Georgia ordered ISPs to block access to Russian media. 
The blocks had the unintended consequence of creating panic In Tbilisi, as some Geor- 
gians perceived the blocks as a signal of Impending Russian Invasion of the capital. 

The technical capabilities typical of second-generation controls are calibrated to 
effect "Just-ln-tlme" or event-based denial of selected content or services. 21 These tech- 
niques can be difficult to verify, as they can be made to look like technical errors. One 
of the more common techniques Involves formal and Informal requests to ISPs. Pro- 
viders In the CIS are under constant pressure to comply with government requests or 
face any number of possible sanctions If they do not. from visits from the taxation po- 
lice to revocations of their licenses. Such pressures make them vulnerable to requests 
from authorities, especially those that are conveyed informally. In Russia, top-level 
ISPs are In the hands of large telecommunication companies, such as Trans- 
TeleKom and Rostelecom, with strong ties to the government. These providers appear 
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responsive to Informal requests to make certain content Inaccessible, particularly when 
Information could prove embarrassing to the government or Its officials. In one such 
case, the popular Russian site — Kompromat.ru — known for publishing documents 
and photographs of corrupt or Illegal practices (roughly analogous to the Web 
site wlklleaks.com) was de-reglstered or filtered by several top-level ISPs (Including 
TransTeleKom and Rostelekom). Service was later restored, and the blocking of the 
site was deemed "accidental." Nonetheless, the Web site was inaccessible throughout 
the February 2008 Russian presidential poll. 24 Similar Incidents haw been documented 
In Azerbaijan, where Web sites critical of President Ilham Aliyev were filtered by ISPs, 
apparently at the request of the security department of the office of the president. 2S A 
similar dynamic Is found In Kazakhstan, where a number of Web sites are inaccessible 
on a regular basis, with no official reason ever being given. 26 

Other, less subtle but nonetheless effective technical means Include shutting down 
Internet access, as well as selected telecommunications services such as cell phone serv- 
ices and especially short message services (SMS). Temporary outages of the Internet and 
SMS services were employed by Belarus authorities during the February 2006 presiden- 
tial elections as a means to limit the ability of the opposition to launch street demon- 
strations of the type that precipitated the color revolutions In Ukraine, Georgia, 
and Kyrgyzstan. At first, authorities denied that any interruptions had taken place, 
and later they attributed the failures to technical reasons. 27 Similar Instances 
were reported (although not verified) to have occurred during the 2007 elections In 
Azerbaijan. 

Second-generation techniques also make extensive use of computer network attacks, 
especially the use of dlstnbuted denial of service (DDoS) attacks, which can overwhelm 
ISPs and selected sites, and which make tracking down perpetrators difficult, since the 
attacks themselves are sold and engineered by "black hat hackers" and can be ordered 
by anyone. Such attacks were used extensively during the 2005 Kyrgyz presidential 
elections that precipitated the Tulip revolution. 28 They were also used dunng the 
2006 Belarus elections against opposition political and news sites. In 2008, presidential 
and parliamentary elections In many parts of the region saw the significant use of 
DDoS attacks against the Web sites of major opposition leaders as well as prominent 
human rights groups. Recently, computer network attacks have been conducted by 
state-sanctioned "patriotic hackers” who act as vigilantes In cyberspace. A Russian 
hacker who admitted that officers from the FSB encouraged him brought down the 
pro-Chechen Web site "Kavkaz center” repeatedly.” Hiere Is strong suspicion that 
the May 2007 DDoS attacks that brought down most of Estonia's networks were the 
work of state-sanctioned "patriotic hackers" responding to unofficial calls from the FSB 
to "punish" Estonia over the removal of a monument to Soviet soldiers In Tallinn. 
Such attacks were also a prominent feature of the Russlan-Georglan a Isis of 2008. 
Several prominent Investigations have been undertaken to determine attribution 
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In this case — Including an ongoing one by the OKI's sister project, the Information 
Warfare Monitor — and to date no definitive evidence has been found Unking the attacks 
to the Russian security forces. 

Third-Generation Controls 

Unlike the first two generations of content controls, third-generation controls take a 
highly sophisticated, multidimensional approach to enhancing state control over na- 
tional cyberspace and building capabilities for competing In Informational space with po- 
tential adversaries and competitors. The key characteristic of third-generation controls 
Is that the focus is less on denying access than successfully competing with potential 
threats through effective countertnformatlon campaigns that overwhelm, discredit, or 
demoralize opponents. Third-generation controls also focus on the active use of sur- 
veillance and data mining as means to confuse and entrap opponents. 

Third-generation controls include enhancing jurisdiction over national cyberspace 
and expanding the powers of state survelUance. These include warrantless monitoring 
of Internet users and usage. In 2008, Russia expanded the powers previously estab- 
lished by SORM-II, which obUged ISPs to purchase and install equipment that would 
also permit local FSB offices to monitor the Internet activity of specific users. The new 
legislation makes it possible to monitor all Internet traffic and personal usage without 
specific warrants. The legislation effectively brings Into the open covert powers that 
were previously assigned to FAPS1, with the twist of transferring to the ISPs the entire 
costs associated with installing the necessary equipment. The SORM-11 law was widely 
used as a model for similar legislation In other CIS counties, and It Is expected that the 
new law will likewise become a standard in the CIS. Although It Is difficult to vettfy the 
use of surveillance In specific incidences, inferences can be drawn from specific exam- 
ples. In July 2008, a Moldovan court ordered the seizure of the personal computers of 
12 Individuals for allegedly posting critical comments against the governing party. The 
people were accused of Illegally Inciting people "to overthrow the constitutional order" 
and "threaten the stability and territorial Integrity of the Republic of Moldova." It Is 
unknown how the authontles obtained the names of the people, but some suggest 
that an ISP provided them with the IP addresses of the users.*® 

Ses'eral CIS countttes are also pursuing the creation of national cyberzones. Countnes 
such as Kazakhstan, Tajikistan, and Russia are Investing heavily Into expanding Inter- 
net access to schools. These Institutions are being tied to special Internet connections, 
which limit access only to resources found In the national Internet domain. These "na- 
tional zones” are popular among some Tajik and Kazakh ISPs because they allow the 
ISPs to provide low-cost connectivity, as traffic Is essentially limited to the national 
segment. In 2007, Russian authontles floated the Idea of creating a separate Cynillc 
cyberzone, with Its own domain space and addressing scheme. National cyberzones 
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are appealing because they strengthen the degree of national control over Internet 
content- They also appeal to consumers, since access to them Is less costly and the 
resources that can be found there are almost exclusively In the local language. 

Other aspects of third-generation controls, such as state-sponsored Information cam- 
paigns In cyberspace, are difficult to document, as they use surveillance. Interaction, 
and direct physical action to achieve a disruption of target groups or networks. The in- 
tent of these campaigns Is to effect cognitive change rather than to deny access to on- 
line Information or services. The ultimate source of these campaigns Is also difficult to 
attribute and can only be established through careful research or Insider knowledge, 
since they are designed to render opaque the role of state actors. These techniques in- 
clude employing "Internet Brigades" to engage, confuse, or discredit Individuals or 
sources. Such action can include the posting of prepackaged propaganda, kotnprornal, 
and disinformation through mass blogging and participation In Internet polls, or ha- 
rassment of Individual users. Including the posting of personal information.* 1 This 
technique, along with the use of surveillance of Internet traffic to affect direct action, 
saw a marked increase in the run-up to parliamentary and presidential polls in Russia- 
Numerous accounts allege that progovernment forces monitored opposition Web sites 
and disrupted planned rallies and marches. In some cases, members of the opposition 
were warned by cell phone not to participate In rallies or risk being beaten. In other 
cases, false Information was disseminated by progovemment forces, leading to confu- 
sion among opposition supporters and, in one documented case, leading them Into an 
ambush by progovemment supporters where several were severely beaten. 

Assessing the Evolution of Next-Generation Controls In the CIS 

The three generations of controls are not mutually exclusive, and several can exist con- 
currently. Taken together, they form a pattern of control that Is both unique to each 
country and generallzable to the region as a whole. However, the degree to which a 
country Is more or less authoritarian does seem to Influence the choice of ‘‘genera- 
tional mix" applied. Countries with stronger authoritarian tendencies tend to apply 
more comprehensive information controls In cyberspace, often using all three genera- 
tions of controls. Conversely, countries that are "more democratic" tend to favor 
second- and third-generation strategies. None of the six countries scoring as "hybrid 
regimes" or "flawed democracies" applied first-generation controls (see Figure 2.1). 

Several factors can explain this pattern. The most obvious explanation of the general 
tendency is that authoritarian states will seek to dominate the public sphere. These 
states tend to be the most vulnerable to mass unrest, prompting additional efforts by 
security forces to ensure that all channels of potential mobilization are controlled. A 
second factor worth noting Is that these six counties are also experiencing the fastest 
rates of Internet growth and, with the exception of Belarus, have among the lowest 
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Figure 2.1 

Spectnun of cyberspace content controls In Use CB (clustered by genautWm and EIU Index of 
Democracy) 

Sourre: Hie Economist Intelligence Unit “The Econombt Intelligence Unit's Index of Democracy 
2008," 2008. http:flgraphics.elu-Coni/PDF/Demoaacy%201ndex'Ki20200B.pdf. 


levels of Internet penetration In tire region. This Utter explanation, which suggests 
that the RUNET In these counties has not become the locus for Informal networks 
that It has In some of the less authoritarian countries, may make It more vulnerable 
and a target for filtering controls than what would be the case elsewhere In the CIS 
where the RUNET Is more central to the political mainstream. In this respect, the ma- 
turity of the network Itself seems to Influence the degree to which filtering controls 
will be applied. This observation begs the obvious question— will the RUNET remain 
open even as countries In the CIS slide toward a new authorttarUntsm? 

While the possibility of greater direct content controls being applied in the RUNET 
certainly exists, there Is a far greater potential that Information controls will continue 
to evolve along the evolutionary trajectory, toward strategies that seek to compete, en- 
gage, and dominate opponents In the informational battle space through persistent 
messaging, disinformation, Intimidation, and other tactics designed to divide, confuse, 
and disable. In tills respect, the patterns of Information control In the CIS may in fact 
represent a model that will evolve elsewhere as governments are faced with the choice 
of imposing harsh controls and being labeled pariahs or doing nothing and risking 
that the technologies could become enablers of hyperdemocracy and undeslred regime 
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Conclusion: Next-Generation Controls Beyond the CIS? 

There are several obvious and not so obvious reasons to believe that second- and third- 
generation controls will become more common outside of the CIS and In fact may 
presage the future of cyberspace controls as a whole. First, the experience from other 
regions suggests that first-generation filtering Is easy to circumvent. The "Great Fire- 
wall of China" Is easily breached, as evidenced by the growing number of circumven- 
tion technolog>’ solutions, from Tor to Pslphon and others. As such techniques become 
more common, enabled and supported by large-scale and distributed efforts in the 
United States and Europe, the Incentives to rely on less technologically static and tem- 
porally fixed methods characteristic of next-generation controls will likely grow. 

It Is also questionable whether first-generation controls In countries like Burma, 
North Korea, and China are really sustainable In the long run. In China’s case, the 
floodgates may open sooner rather than later as the Chinese Internet Itself becomes 
much more central to popular culture. First-generation filtering practices can produce 
economic and other social costs through collateral filtering and disincentives for for- 
eign direct investment and tourism. As countries become more dependent on cyber- 
space for research, business, and other International communications, the friction 
Introduced by filtering becomes increasingly unpopular, costly, and Impractical. 

More Important than these factors, however. Is the growing legitimization and fre- 
quent practice of policing the Internet through Indirect and distributed means, and In 
particular through third parties, including the entitles that actually support the cyber- 
space Infrastructure, from connectivity to hosting to social networking platforms. Since 
much of cyberspace Is operated by the private sector, there are practical and legal limits 
to the direct reach of government controls. Controls have thus evolved downward 
and In a distributed fashion. In a significant privatization of authority. In conformity 
with second- and third-generation controls outlined previously. Naturally, the scope 
for second- and third-generation controls differs among authoritarian and democratic 
countries, but examples of each can be found in both contexts. 

In China, for example, while much of the attention focuses on the technologies of 
the Great Firewall of China filtering access to the Internet, at least as much, If not 
more, of the Information controls exercised In that country’ happen in a more distrib- 
uted fashion and by private actors. Web hosting and social networking services are 
now routinely obliged to sign self-discipline pacts and follow rigid hosting protocols 
that limit what can be communicated online; search engines — Including those owned 
by American companies like Google, Microsoft, and Yahoo! — routinely filter their 
search results, often more aggressively than the government does Itself; and In the 
most extreme example, volunteer citizen groups — sometimes known In China as 
SO cm I brigades for the amount they are purportedly paid for each post — swarm the 
Internet’s chat rooms, blogs, and other public forums making statements favorable to 
the government.* 2 The latter was dramatically demonstrated. In a clear example of 
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third-generation controls, during the time of the Olympics, when thousands of 
Chinese bloggers posted aggressively to counter what they perceived as anti-Chinese 
propaganda. 33 Whether the volunteer posts were managed or encouraged by the state, 
or simply benefited the state coincidentally, or some combination. Is a vexing question 
nearly' impossible to untangle. Such attribution problems are. In fad, one of the key 
characteristics of second- and third-generation controls and one of their greatest chal- 
lenges for research pro|ects like the ONI. 

Outside of authoritarian contexts and among democratic countries. It Is now com- 
mon to hear of legal and market pressures being Invoked to remove content from 
Web hosting and social networking platforms, and there Is also a very noticeable trend 
to offload policing adlvltles to ISPs, particularly In the areas of content controls around 
pornography, hate speech, and copyright violations. In fad, most Industrialized demo- 
cratic countries have passed far-reaching surveillance measures that enable widespread 
eas'esdropplng on e-mail, cellular phone, and other communications activities by 
requiring ISPs to retain and, when required, turn over such Information to legal 
authorities. 

Perhaps the strongest impetus toward second- and third-generation controls has 
emerged from a growing emphasis on cyber security and the recognition of cyberspace 
as a domain of military action. Military actors have come to understand cyberspace as a 
domain equal in importance to land, air, sea, and space, requmng a full sped rum of 
capabilities. This has meant developing weapons and tactics designed to disrupt, de- 
stroy, and confuse potential adversaries. For the most part, these capabilities have 
been kept quiet and under dasslficatlon, but they are similar In Intent and execution 
to the network attacks characteristic of second-generation Information controls. Russia, 
China, and the United States have all developed doctrines and capabilities for opera- 
tions In cyberspace that Indude computer network attacks, as well as psychological 
operations designed to shape the domain through selective filtering, denial of access 
to Information, and Information engagement. The Intent and effect of these emerging 
doctrines Is the same as those we have documented In second- and third-generation 
controls in the CIS — to silence Information that Is strategically threatening and sow 
confusion and doubt among opponents dependent on cyberspace for Information 
and organization. 

Overall, the lexicon of cyber security Is shifting norms around acceptable behavior 
for intervention Into cyberspace and generating new incentives for technological de- 
velopment. Pervasive surveillance, lndudlng deep packet inspection. Is now an accept- 
able part of compliance with good security practices, despite the Impacts on privacy 
protections. Similarly, the political rush to secure cyberspace Is generating economic 
opportunities not seen since the Internet boom of the 1990s. However, unlike the 
1990s when the rush was led by companies seeking to open up cyberspace, the current 
momentum is In the other direction. The fact that defense contractors are now lin- 
ing up to compete In this domain only raises the troubling concerns that some of the 
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valuable freedoms gained over the last 1 S years in cyberspace will be sacrificed at the 
altar of security. 

These are troubling tendencies, and ones with Implications far outside of the demo- 
cratic countries of the OSCE. The confluence of second- and third-generation controls, 
the militarization of cyberspace, and the legitimization of surveillance are contributing 
to a dangerous brew. The cyberspace en|oyed by the next generation of users may be 
a very different, more regulated, and less empowering domain than that which was 
taken for granted in the past. 
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Introduction 

The European Union (EU) enacted a directive on data retention In 2007 that requires 
all member countries to mandate the retention by telecom companies of the sender, 
recipient, and time of every Internet or other telecom communication. The directive 
requires the collection of the Internet Protocol (IP) address, user ID, phone number, 
name, and address of every sender and recipient, but explicitly excludes (but does not 
forbid) the monitoring of content Itself. All the monitored data must be retained for a 
period ranging between six months and two years, contingent upon the local law of 
each member state. Telecom companies must promptly give these data to law enforce- 
ment authorities upon request to assist with serious crimes, overseen by a national 
public authority monitoring the data retention practices.' As of Its effective dale of 
April 2009, all Internet service providers (ISPs) in EU countries must comply with the 
relevant national Implementations of the directive. 

The monitoring required by the EU data retention directive amounts to a form of 
surveillance. The directive does not take the form of surveillance that most quickly 
leaps to mind: the two men In a van with headphones listening to phone conversa- 
tions of an unwitting crook In a seedy apartment. But It has functional similarities. 
The directive requires that the participating states collect personal data about their do- 
zens without the citizens' consent. It enables states to use these data to control some of 
the subjects of monitoring (Including by arresting them). What matters most about the 
dlrecdve and Its relationship to surveillance Is Its Impact on citizen activity and Its 
place In the growing constellation of surveillance activities online. 

The Internet Is a "surveillance-ready" technology. There Is a wide range of choices 
for any state that wishes to know more about Its citizens. This digital Information 
comes In the form of bits of data that flow through rivers and Into oceans of data. 
These rivers are full of Information that passes by a given point, or series of points, in 
a network and can be Intercepted; these oceans are stocked with informaUon that can 
be searched after the fact; and the rivers arise from springs that can be watched at the 
source. The data involved are held In private hands as well as public. 
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This chapter paints a simplified picture of the technical landscape of Internet surveil- 
lance. as well as the place of the EU data retention directive within that landscape, by 
taking up a series of short cases about surveillance. We examine how these cases in- 
form (and are Informed by) the technical questions of what data are being actually 
and potentially monitored on the Internet and whom we are trusting to access that data. 

We break Internet surveillance into three broad categories: network, server, and cli- 
ent. The Internet Is composed of clients and servers. In essence a series of devices that 
talk to one another through the network. Every bit of data on the Internet Is traveling 
or residing at one or more of these locations at any given time. As such, any given 
Internet activity must happen at one (or more) of these locations. We treat any surveil- 
lance happening on the end user device as cllent-slde surveillance, including both soft- 
ware tools like workplace keylogging systems and hardware tools like keyboard tapping 
devices. We treat any surveillance happening on a machine that predominantly 
accepts requests, processes them, and returns responses as server-side surveillance. 
And for simplicity, we treat everything between the client and the server as the net- 
work, Including the wires over which the data travel and the routers that direct the 
traffic. 

We argue in this chapter that the EU data retention directive Introduces new risks re- 
lated to the networks of trust created by each category of surveillance. In the section on 
network surveillance we argue that trust can only be rerouted around the network, 
rather than removed from It. and that the EU data retention directive may cause users 
to reroute trust In the network In ways that both reduce the amount of useful data 
available to law enforcement and encourage users to expose more of their network 
data to non-EU states. In the section on server surveillance we argue that users struggle 
to evaluate how the data they submit to servers are used and combined and that the 
EU data retention directive Is likely to Increase this problem by requiring ISPs to store 
more server data (which will be used and combined In ways opaque to most users). In 
the section on client surveillance we argue that the client has become an Intensely 
complicated battleground of trust played out by sophisticated actors with their own 
agendas, resulting in widespread leaks of data from the client. This section argues that 
the EU data retention directive will place a large new set of private data onto this 
battleground — to the detriment of people from around the world. 

Network Surveillance 

The most obvious kind of Internet surveillance takes (Mace on the network between 
the clients and servers. Government agencies collect data from within network ISPs, 
Including not only wlretap-llke data about specific subjects with warrants but also en- 
tire streams of data for mining without Judicial oversight. But the network Is a diverse 
place. There are a wide variety of different actors with different access to data. As a re- 
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suit, there are a wide variety of other cases of network surveillance: about users who try 
to get around surveillance but end up exposing themselves to different sorts of surveil- 
lance in unexpected ways, about the collection of extensive user data without mean- 
ingful consent for targeted advertising, and about how criminal organizations exploit 
the trust model of the network to facilitate Illegal surveillance. 

The U.S. Communications Assistance for Law Enforcement Act (GALEA) requires 
that telecommunications companies have the ability* to respond quickly and fully to 
wiretap requests even when using the newly digital telephone switches. The current 
Interpretation of this law Includes not only traditional telephone service but also Inter- 
net telephone services like Skype and, pending a ruling by the Federal Communica- 
tions Commission, maybe even sender and recipient data for all Internet traffic. Such 
a ruling would render CA LEA in a sense analogous to the EU data retention directive. 
The FCC has ruled that ISPs can forward their entire data stream to Independent 
"trusted third parties" to handle the wiretapping Implementation, exposing data 
streams of entire ISPs to these third parties. 2 

More Intrusively, the National Security Agency (NSA) Is apparently mining the full 
stream of data passing through ma|or ISP backbones In the United States. 3 There are 
limits to our understanding, as laypersons, of this process, for obvious national security 
reasons. We know that the equipment used for this surveillance Is capable of executing 
highly sophisticated queries on the data passing through the backbone. We know that 
the NSA Is engaged In some level of warrantless surveillance of the International com- 
munications of U.S. citizens, but we do not know precisely what Is being done with the 
data. 4 We are left with Indeterminate, circumstantial evidence about the existence and 
function of the surveillance that leaves unanswerable questions about what data the 
NSA Is making available to whom. 

Kelakks Is one of many proxy tools available on the Internet that encrypts and 
reroutes traffic to avoid monitoring or filtering by anyone, such as the NSA, monitoring 
the user’s local ISP. When someone In China uses Kelakks to request a page from the 
BBC, the connection goes from the user's ISP in China to Relakks In Sweden (where 
Kelakks Is hosted) and then from Relakks In Sweden to the BBC in Britain (and back 
along the same route). The Chinese ISP can only see a connection to Relakks In Swe- 
den, hiding the ultimate destination of the request (and bypassing any filtering as 
well). But In 2008, Swedish lawmakers authorized the the FOrsvarets Radloanstalt 
(FRA), or National Defense Radio Establishment, a government agency responsible for 
signals Intelligence, to monitor the content of all International Internet and phone 
traffic (including that of Relakks) without a warrant, requiring all Swedish ISPs to 
install FRA monitoring equipment. 5 Now. Relakks users (at least, those who do not fol- 
low Swedish politics) are unwittingly handing their complete Internet data streams 
over to the Swedish government as they seek to avoid monitoring on their own local 
networks. 
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Users have reason to be concerned about forms of surveillance on their local net- 
works beyond government monitoring. In June and July of 2007, several British Tele- 
com <BT) Internet customers noticed strange problems with their Internet connections 
that they tracked down to a spyware company, 121 media. 6 BT Insisted that It had 
nothing to do with the suspicious behavior, and 121 media refused to comment on 
the grounds of customer (BT's) privacy. 7 But in 2008, 121 media, renamed Phorm, pub- 
licly announced a deal with BT to target advertising at the ISP's customers* Phorm 
soon afterward admitted. In response to media reports of the 2007 activity related to 
121 media and BT. that it had already tried Its targeted advertising on tens of thousands 
of users on the BT network with BT's help but without the knowledge of the users* 
Phorm claims that It does not store any personally Identifying Information or browsing 
histories in the process of targeting ads; Phorm says It only stores Information about 
the kinds of sites each user visits (expensive cars, rugby sites, and so on) connected to 
the user only by a randomly generated unique ID. 10 Privacy advocates have reacted 
strongly against Phorm's announcement and justifications, but BT continues to push 
for a full rollout of the system." 

As with the Kelakks case, user efforts to circumvent network monitoring can have 
unpredictable results on the network of trusted relationships that tie together Internet 
activity. In February 2008, a Pakistani ISP responded to a government request to ban a 
video on YouTube.com by (probably accidentally) blocking a majority of the entire 
Internet from accessing the whole site for a few hours. 12 During the few days Pakistan 
was blocking YouTube.com locally, many Pakistanis bypassed the block using a tool 
called Hotspot Shield." AnchoiFree describes Hotspot Shield as a privacy tool: "You re- 
main anonymous and protect your privacy." 1 * But AnchorFree makes money by Inject- 
ing ads Into Web pages, and users of the tool give AnchorFree complete access to all 
data exchanged while Web browsing with the tool. AnchorFree implies (but never 
explicitly says) that It does not monitor Its users' traffic, but It nonetheless has both 
the ability to snoop on the data at any time and a business model based on processing 
user data for advertisers. Thus, Pakistan Is monitoring Its citizens' Internet traffic to 
block content It does not like, and citizens are accessing the blocked content by using 
a tool that circumvents Pakistan's filters. But the circumvention tool Is at least poten- 
tially just a monitoring tool for the different purpose of advertising. 

To make sense of these cases, we need to understand what data are available on the 
network and to whom they are accessible. Three sorts of data are vulnerable to surveil- 
lance on the network: routing Information, the actual content of the data stream, and 
contextual signatures. All Internet data packets must Include the IP address of the ulti- 
mate recipient, and most data packets (Including all Web and e-mail traffic) also in- 
clude the IP address of the sender. Users can hide routing information on the network 
by using proxies, like Relakks or HotSpot Shield, which forward communication be- 
tween a client and a server. In addition to the routing data, the packets contain both 
protocol-specific data (data about the URL requested, the referring URL, the user agent, 
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and so on for Web requests; data about the originating e-mail server, the "from;" 
e-mall address, the date, and so on for e-malls) and the content proper of the commu- 
nication. This content Includes, but Is not limited to, any data submitted to Web sites, 
any Web pages retrieved, and any e-mails sent or received. 

Users can encrypt the content of their network communications to hide their actlv- 
Itles from network monitoring. Encryption Is most effective when It is applied end-to- 
end, as by using Hypertext Transfer Protocol Secure (HTTPS). In this case, the enure 
stream of data from the client to the server Is encrypted, allowing no one on the net- 
work between the sender and the receiver to read the content. But end-to-end encryp- 
tion has to be supported by both the client and the server, and many servers do not 
support encrypted communication at all or for all pages. In these cases, a user can con- 
nect through a proxy like Relakks or HotSpot Shield to encrypt the data from the client 
to the proxy. But such encrypUng proxies sUll use unencrypted channels to talk to 
servers that do not support encryption. As a result, the proxled content remains read- 
able to any Intervening routers on the network. For instance, even though content be- 
tween Relakks and the user Is encrypted, the requests and responses between Relakks 
and Google.com are not encrypted. 

These apparently secure connections between Internet users leak other, contextual 
forms of informaUon as welL The Information about those requests and responses — 
think of It as "metadata" to the "data" of the communication Itself— can be observed 
by anyone on the network In between. Communications that are both encrypted and 
proxled can hide both the rouUng Information for, and the content of, a communica- 
tion from the network between the client and the proxy. But even proxled and 
encrypted data leaks some of Its metadata: InformaUon about the timing, number, 
and size of the packets as well as the fact that the communlcaUon Is proxled and 
encrypted, may be observed. Different sorts of traffic generate different signatures of 
packet size and timing that can allow easy identification of the nature of the commu- 
nication. These signature-based monitoring methods have reportedly been used, for 
example, to block proxled file-sharing traffic. 

The Internet consists of billions of links between clients, servers, and routers, making 
comprehensive surveillance of the entire network very difficult. But In practice, all 
Internet traffic flows through a much smaller number of links between routers, and 
those routers are controlled by a much smaller yet number of autonomous systems 
(ASs). These ASs are the independent entitles (mostly ISPs) that have the ability to 
route traffic on the Internet. There are (ewer than 100,000 of these ASs In the world. 
In pracUce, the vast ma|onty of Internet traffic flows through an even much smaller 
number of those ASs. For Instance, virtually all 300 million Internet users In China 
connect to the Internet through only five big ISP ASs. 14 For a combination of techni- 
cal, business, and policy reasons, a disproportionate amount of global Internet traffic 
flows through a few very large ASs In the United States, Including most traffic between 
Europe and Asia. 16 Ttaffic between ASs within a given country (or sometimes even a 



40 


Hal Roberts and john Pdfrey 


given city) often flows through an Internet exchange point (1XP), a physical network 
node that connects geographically close ASs. There are fewer than 200 major IXPs In 
the world, which together carry- much of the Internet's local traffic. 17 IXPs keep local 
traffic local, so unlike the ASs responsible for routing intracountry and Intracontinental 
traffic, most IXPs are located In (and therefore potentially under the jurisdictional con- 
trol of) the country whose traffic they carry. 

This topology of the Internet has several Implications for the actors trusted with ac- 
cess to Internet data. The first Is that a large majority of users need to access the Inter- 
net through an AS (usually an ISP). The situation should be familiar by now: data from 
these users Is therefore vulnerable to surveillance by someone controlling that AS. The 
second Is that there are a relatively small number of these ASs within any given coun- 
try and an even smaller number of IXPs, so monitoring all the network traffic In a 
given country Is a manageable task of making the small number of ASs and IXPs mon- 
itor their networks (though some of these ASs can be big complex organizations In 
themselves). This rule applies doubly for International Internet traffic, which Is con- 
trolled by an even smaller number of ASs disproportionately located In the United 
States. 1 " And the United States Is capable of monitoring a large portion of International 
Internet traffic through a few ASs based in the United States, Including even traffic 
flowing between non-U.S. countries. 

A user can move her trust around from provider to provider. In the end, though, she 
must ultimately trust someone on the network (barring the unlikely event of wide- 
spread adoption of end-to-end encryption of networked digital communications). In 
practice, almost every user of digital networked technologies ends up trusting more 
actors over time. A user who tries to get around surveillance of her local ISP connec- 
tion, for Instance by Phorm, has only a few choices of ISPs In the United Kingdom, 
most of whom have been reported to be considering adding Phorm monitoring to their 
networks. A user may choose to stay on the possibly monitored local network but use a 
service like Relakks to proxy and encrypt her data as It travels through the local, Phorm 
monltonng, ISP. The user will avoid Phorm monitoring In the process, but at the cost 
of trusting not only Relakks but also the Swedish ISP through which Relakks talks to 
the Internet and the Swedish government that monitors the data flowing through all 
Swedish ISPs. And her local ISP will still be able to tell that she Is proxylng and encrypt- 
ing all her data through a third party, which fact Itself might prove suspicious to a law- 
enforcement agency. Finally, the user's data are vulnerable to network monitoring at 
any point along which they travel, from her local ISP to the server's ISP to any ISPs 
between. A portion of her data Is likely to travel outside of Europe through one of a 
few ISPs in the United States that process a disproportionate share of International 
Internet traffic. 

Against the backdrop of these forms of network surveillance, we can see that the EU 
data retention directive has the potential to distort the network of trust through which 
Internet data flows. The precise effects of these distortions are difficult to predict. Some 
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numbei of EU users may react to the increased monitoring by using encrypted proxies 
In non-EU countries to avoid local ISP surveillance, maybe to hide Illegal activity but 
maybe to hide legal but sensitive personal activity. The directive may encourage these 
proxy users to route their connections through non-EU countries to avoid the data re- 
tention mandate altogether. 

The net effect of this process may very well be that law enforcement has less access to 
useful data. Likewise, smart users may proxy their data through autocratic countttes 
like China that are least likely to share data with EU countttes to avoid monitoring 
by another EU country compliant with the data retention directive. If enough users 
resist monitoring through the use of proxies, ISPs will be pressured to try to block 
such proxled traffic. If ISPs were to take this step, they would likely start an arms race 
between proxy tools and proxy blocking tools analogous to the current arms race be- 
tween malware and antivirus software (as has happened In China with Its attempts to 
block flltenng circumvention tools). This arms race could further strain the network 
through the same sort of knock-on effects of the malware arms race: users wanting to 
avoid monitoring would become Increasingly dependent on Increasingly’ sophisticated 
anonymizing tools and therefore become Increasingly vulnerable to the developers of 
such tools (some with good, some with bad intentions as with the current developers 
of antivirus tools). We have already seen this process with music downloading took, 
which have become a vector for malware Infections as the music Industry has driven 
them underground.” 

The popularity of took that circumvent various sorts of flltenng of music download- 
ing took points to the possibility that large numbers of users will attempt to route 
around the monltonng, particularly If authontles brand Illegal music downloading a 
"settous cdme." But users also have a tendency to accept gradual erosions of privacy 
without resorting to resistance .* 0 Even relatively small-scale usage of proxy took could 
have the strong effect of making those few users very susceptible to false suspicion by 
law enforcement authontles. Given the widespread availability of proxylng tools and 
widespread publication of the EU data retention directive. It seems safe to assume that 
many of the most serious criminals will use such tools, reducing the effectiveness of 
the monltonng of such users. Internet service providers can use contextual Informa- 
tion about connections to detect the use of proxies and will be tempted to track which 
users are reskttng monitoring. This possibility raises the risk that merely resisting moni- 
toring will label a user as suspicious. 

Server Surveillance 

As with the network, the collection of data on Internet servers is highly concentrated 
among a few big actors. Even though there are hundreds of millions of servers on the 
Internet, a few large entitles like Google, Yahoo, Facebook. and Wikipedia capture a 
large proportion of Internet traffic. Virtually all these big sites collect data about their 
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users. Fox example. Google and Yahoo collect search queries (among many other sorts 
of data), Facebook collects the social maps of Its users, Wikipedia collects the editing 
histories of Its users, and so forth. The collection of these sorts of data does not look 
like the typical Internet surveillance performed by the NSA and other government 
actors, but It represents a second type of surveillance on the network, equivalent In 
scope to the collection of data flowing across the network. 

Google In particular (but not alone) has collected a tremendously large and intrusive 
amount of personal data about Its users through the operation of Its various services. 
Google argues that users should not be overly concerned about Google’s data collec- 
tion: "we remember some basic information about searches. Without this Information, 
our search engine wouldn't work as well as It does or be as secure. [What this Informa- 
tion) doesn't tell Google Is personal stuff about you like where you live and what your 
phone number Is — Logs don’t contain any truly personal information about you.'’* 1 

User search data surely* help In the way Google says they do ("Improve our search 
results, 1 ' "maintain security," and "prevent fraud”). And their explanations of the prl- 
vacy implications of the data usage of Google's engineers are accurate in a narrowly 
technical sense. But the Importance of data Is determined by the larger world In which 
It exists — by the other data that It connects to. Google’s statement that a cookie does 
not tell them "personal stuff about you like where you live” Is only true In the narrow 
sense that your driver's license number does not tell the police where you live. Even 
though the cookie Itself Is |ust a random string of gibberish letters. It can Indeed be 
used to look up personal information 'Tike where you live." For example, the cookie 
connects to all searches performed by a single person. Many people search for their 
own names at some point and for their own addresses at some point (If for no other 
reason than to see their houses In Google Maps). The cookie connects those two 
searches to the same (otherwise anonymous) person, thus potentially Identifying 
the name and address of the person behind the random gibberish of a particular 
cookie. Researchers have consistently shown the ability to crack the Identity of Indivi- 
dual users In these kinds of data collections with anonymous but Individually unique 
Identifiers.** 

It Is likely that Google’s collection of search terms, IP addresses, and cookies repre- 
sents one of the largest and most Intrusive single collections of personal data online 
or off-line. Google may or may not choose to do the relatively easy work necessary to 
translate Its collection of search data Into a database of personally Identifiable data, but 
It does have the data and the ability to query personal data out of the collection at will. 
Even assuming perfect security to prevent data leaks, Google Is still sub|ect to many 
sorts of government requests for Its data. Witness, for Instance, the success of Viacom 
In subpoenaing the complete log of every video ever viewed on YouTube.com (which 
Is owned by Google) In the context of copyright litigation. 23 

In addition to Its search engine, Google's AdWords displays ads on about 3S percent 
of all advertising Web pages. 24 Google logs Instances of consumers clicking on ads 
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through Its AdWords system and watches the advertisers through AdWords auctions 
that determine the value of advertising topics. Content providers track the value of 
those advertising topics to determine which sorts of content to publish. The advertisers 
use the AdWords system as a stateless form of market research to target consumers 
without knowing anything about them. Content providers watch consumers to deter- 
mine which sorts of content generate the most interest. All this monitoring happens in 
real time. Google adjusts the placement of ads in real time according to the current 
results of an ad auction; content providers watch the profitability of their content 
In real time and make adjustments to attract more ad-cllcklng customers; advertisers 
adjust their bids and update their ads In real time to attract more users. The effect of 
the system Is continuous but stateless market research that Is constantly adjusting to 
the current Interests of users rather than the historical Interests over time tracked by 
user profiling organizations like comScore, Phorm, and NebuAd. 

Google and other service providers only have access to data that Is sent directly to 
them over the network: the client address, the request Itself, and any content explicitly 
submitted by the user. All these server-collected data, other than the client address, 
may be encrypted while traveling over the network, giving the end server access to 
some data that are not available on the network. For Web servers, the protocol data 
may Include cookies, which are often used to assign a pseudonymous Identity that per- 
sists between separate requests. Users voluntarily (and knowingly, at least In theory) 
submit vast amounts of such data to Internet servers. Users are aware that they are sub- 
mitting names, addresses, and credit card numbers to Amazon when buying merchan- 
dise, personal e-mall to Microsoft through Hotmail, and movie preferences to Netfllx 
when renting videos. 

What determines the risk of privacy Intrusions — and what ties this case to the narra- 
tive of online surveillance — Is not |ust the collection of data but rather what the actors 
controlling the servers do with the data, with whom they share the data, and how the 
data are combined with other data. The act of collecting a credit card number to exe- 
cute a purchase for a user Is presumably acceptable and necessary In the modern global 
economy. But using the a edit card number to request data about a user’s purchase his- 
tory from the credit card company In order to target advertising at him may not be so 
acceptable. Likewise, It Is fine for Microsoft to collect personal e-mails through Hot- 
mail, but It would become a concern If Microsoft were to sell Its users' e-mail content 
to a consumer research company. And Netfllx seems Innocuous when using video pref- 
erence Information for Its own recommendation engine, but many users would be un- 
comfortable If they found out Netfllx was combining Its users' video rental history 
with (even public) Information from users' social networking pages to make video 
recommendations. 

The Issue of combining data Is particularly relevant (but not unique) to server-based 
surveillance because, In comparison to network and client surveillance, the domain of 
the data collected Is generally much more limited. However, these domains of data can 
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almost always be combined either with themselves or with other domains to create a 
much more personal. Intrusive set of combined data — for Instance, by combining the 
Google search data with the Google search cookies to Identify users by cookie, or by 
combining the Google search IP addresses with ISP logs (as required by the EU data re- 
tention directive) to Identify' users by IP address. 

All these different possible uses and combinations of data represent networks of 
trust. A rational user ought to evaluate these decisions about trust carefully, though In 
practice few have the time to do so with any level of sophistication. The example of 
Google demonstrates the complexify' of these issues of trust — about how data are col- 
lected, who has access to It, and what Is done with It. Google Is collecting vast amounts 
of Information from users In ways that are not clear to most users, yet most users 
eagerly accept the arrangement that Google offers them. Most users presumably under- 
stand that they are giving Google access to their search terms, but some may not 
understand that Google Is storing these data. Yet other users are likely not to under- 
stand that Google generates Its revenue through Its advertising brokerage business. It 
is not at all clear that clicking on any Google AdWords ad takes you to a Google server 
first and only then redirects you to the clicked ad. Nor is It clear that by clicking on a 
Google AdWords ad, you are sharing with the advertiser the fact that you searched for 
or browsed content about a given sub|ect. The potential of Google's vast store of user 
data creates a serious risk of disclosure throughout this network of trust regardless of 
whether Google's intentions are In fact good for Its customers. 

The exchange of data between user and server establishes a relationship of trust. A 
survey by the Internet security company WebSense found that 60 of the 100 most pop- 
ular sites on the Internet had hosted malicious code at some point In the past year. 25 
The examples that WebSense dtes are attacks on the Web pages displayed to users 
rather than the back-end servers, so they do not give direct access to user data stored 
on the servers. But they do hl|ack the Identify’ of the server on behalf of the attacker, 
allowing the attacker to present a portion of the Web page as If It Is coming from the 
trusted server. The result Is a variety of attacks that collect data on behalf of an attacker 
posing as the trusted server. These widely prevalent Web site attacks allow attackers to 
Insert themselves into users’ networks of trusted actors by way of the Infected sites. 

Google tried to use the EU data retention directive as part of the rationale behind Its 
eighteen-month data retention period for certain user data, though some observers 
contend that the directive does not apply to Google as a "content provider," as 
opposed to a "communication service." 26 EU commissioners beat back that particular 
argument and have aggressively lobbied for Google to reduce the amount of data 
It keeps and how long It keeps the data under Its privacy directive. 22 This exchange 
demonstrates precisely the problem at the Intersection of the EU data retention direc- 
tive and the way that surveillance works In the networked public sphere today. The 
same EU authority that Is responsible for guarding against the retention of personal 
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data by service providers like Google Is at the same time requiring ISPs to increase the 
amount of data they are storing and the length of time over which they are storing 
It. ISPs are companies |ust like Google, and requiring that they store the data re- 
quired by the data retention directive imposes the same sorts of risks of unwarranted 
surveillance. 

Client Surveillance 

In addition to surveillance on the network and on servers, there is a range of different 
actors directly watching users' machines In various ways. The number of different 
actors trying to control access to the client has turned the end user's computers into a 
constant battleground of surveillance. Malware creators try to Infect machines to steal 
valuable personal Information. Anti-virus developers watch computers to find these 
malware and other sorts of snooping software. Including sophisticated family and work- 
place surveillance systems. Even personal computing equipment — say, a laptop — 
can Itself be turned Into a surveillance system, through the use of keyboard logging 
devices that are Installed Inside the box of the computer, making them virtually Impos- 
sible for the casual user to detect. 

SpectorSoft was selected as PC Magazine ' s editor’s choice for "monitoring'' software 
and Is the largest provider of such software for home, small business, and corporate 
use. It captures virtually every kind of activity on the client computer and can send all 
of the monitored data to a remote computer for viewing. 28 Since becoming the market 
leader In 2004, SpectorSoft has stopped advertising to spouses, citing legal ambiguity 
and spousal abuse, but It continues to market Itself for use monitoring minors and 
employees, neither of whom are legally protected from such monitoring in the U.S. 29 
SpectorSoft reported In 2007 that Its software was Installed on over 400,000 desktops, 
60 percent of which were home users. 30 All major anti-virus products classify Spector- 
Soft as spyware and attempt to remove It, but SpectorSoft actively avoids detection by 
either the monitored subject or anti-virus or other antl-spyware software. 81 

In addition to these monitoring products like SpectorSoft, which take the form of 
software, a vartety of companies make hardware keyboard logging devices. These devi- 
ces are generally small plugs that sit between the USB plug of the logged keyboard and 
the USB plug of the logged computer but can also be cards that sit Inside the computer 
case. The devices record every key pressed on the keyboard and can be used to capture 
passwords, emails, typed documents, and any such Information entered on the key- 
board. Relative to software keyloggers, these devices are much easier to Install given 
physical access and are Impossible to detect via anti-virus software. The only way to de- 
tect some of these devices Is physically to open the computer case. 32 

The most Intrusive and prevalent example of client-side surveillance software Is 
the collection of various bots, viruses, worms, trojans, and other malware that Infect a 
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significant chunk all Internet connected computers. As a whole, the set of malware- 
infected computers have the ability to collect all of the client data of hundreds of mil- 
lions of computers, though In practice data collected Is usually limited to obviously 
profitable data like credit card numbers. 33 Most of these Infected computers are organ- 
ized Into large botnets — networks of Infected computers remotely controlled by a sin- 
gle entity. The Confkker botnet, one of the biggest currently, now controls several 
million infected computers. 34 Botnets like Conficker perform a variety of Illicit activ- 
ities Including sending spam, committing click fraud, subjecting servers to denial of 
service attacks, and stealing financial information. One recent study of spam distribu- 
tion determined that the Storm botnet was responsible for twenty percent of all spam 
sent In the first quarter of 2008, and Storm was |ust the biggest of many botnets at the 
time. 35 

The direct impact of most of these activities on any given infected user Is usually rel- 
atively small: outgoing spam only costs the user bandwidth, credit card theft Is gener- 
ally Insured by the credit card company, and dick fraud costs a user nothing directly. 
But the potential for greater abuse of personal data, both Individually and collectively, 
Is difficult to overstate given the vast number of malware-infected computers, the com- 
plete access of the malware to the Infected computers’ data, and the Increasing sophis- 
tication of the criminal organizations that run them. 36 A recent report by two of this 
volume’s co-editors, Ron Delbert and Rafal Rohozinskl, and their respective teams, on 
the use of a small botnet to survell a wide variety’ of embassies and other highly sen- 
sitive sites In southeast Asia, demonstrates the potential for harm represented by the 
botnet surveillance. The Information Warfare Monitor found dear evidence that 
the botnet, which they call GhostNet, had wide ranging abilities on the client: from 
copying locally stored files to watching the physical spaces through the webcams. 37 
The study presented only circumstantial evidence pointing to Chinese involvement — 
the servers commanding the botnet were mostly located In China, and the infected 
sites were all of high, regional value to China. But the documentation of this particular 
botnet demonstrates that It would be straightforward for China or another state (or prt- 
vate) actor to perform wide-scale dtent-slde surveillance through a botnet. 

To protect oneself from viruses, bots, worms, and other such malware, most experts 
recommend Installing antl-vlrus systems on all client computers. But this antl-vlrus 
software Is Itself highly intrusive, operating at the most fundamental levels of the oper- 
ating system, incurring significant performance penalties, and attempting to avoid the 
notice of malware (which Is Itself trying to detect the antl-vlrus systems to disable 
them). Antl-vlrus tools have the capability' to do the same sorts of harm that a piece 
of malware can do, Including both stealing data from and disabling the host computer. 
Trust In Symantec and the other antl-vlrus vendors not to snoop or harm the computer 
Is mostly well founded, but fake antl-vlrus systems have now become one of the most 
common types of malware precisely because of the need to trust antl-vlrus systems and 
the difficulty’ of determining which antl-vlrus systems to trust. 
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Various other sorts of actors survell users through their clients as well. ComScore Is 
one of the biggest of several companies that collect data about Internet users for mar- 
ket research. It collects the entire Web browsing stream. Including encrypted requests, 
from the 2 million members of Its worldwide "consumer panel." ComScore connects 
Its online data with a variety of sources of off-line data, Including supermarket pur- 
chases and automobile registrations. ComScore has admitted to using Its collected 
data to log In to Its members' online banking accounts to s’erlfy reported Incomes.** 
ComScore recruits these panel members from a wide variety of countries. Including 
many from Europe and Asia, through a combination of sweepstakes, network per- 
formance Improvement tools, claims of antimalware protection, and (according to 
ComScore) a sincere desire by panel members to improve the efficiency of the 
Internet. ComScore discloses to the panel members that the software Is monitoring 
their Web browsing activities, but It also keeps a strong separation between the 
company Itself and the operations that collect the data — currently OplnlonSquare 
and PermtsslonResearch — by not directly naming the tools or the organizations that 
operate them anywhere on ComScore.com or even in Its SEC annual report ffllng. And 
It has had to recreate those operations at least once to evade detection by antispyware 
tools.*’* ComScore sells access to these data, estimated by ComScore at 28 terabytes col- 
lected per month In 2007, as market research to many of the largest companies In the 
world. The U.S. Privacy Act of 1974 prohibits the U.S. federal law enforcement and 
other government agencies from Importing data from ComScore (or LexlsNexls or oth- 
er private database) en masse, but the law does allow the agencies to perform quenes 
through ComScore or other private data sources about specific people* 0 

Governments have various levels of access to data collected through antl-vlrus soft- 
ware market research, and malware. Some governments allegedly also use their own cli- 
ent software to collect data directly. Direct evidence of government client surveillance 
Is rare, but examples occasionally pop up. For Instance, the U.S. Drug Enforcement 
Agency (DEA) has been documented as Installing a keylogger on a suspect's machine 
to capture the encryption keys necessary to read the suspect's PGP-encrypted email. 41 
And we know ma|or antl-vlrus companies have compiled with court orders to Ignore 
such U.S. government spyware. 42 There Is strong evidence that the German police are 
aggressively pursuing the use of cllent-slde software to tap calls on Skype. 41 In Den- 
mark, parliament approved a law that explicitly gives law enforcement agencies the 
authority to Install keylogging software on a suspect's computer. 44 And. thanks to 
researchers at the Citizen Lab, the world knows that a Chinese version of Skype was 
logging sensitive messages to servers as mandated by the Chinese government. 45 The 
software used by government agencies for surveillance in all these examples is func- 
tionally indistinguishable from dlent malware — the whole point of the software Is to 
collect data from the subject without knowledge or consent. 

Cllent-slde surveillance provides the most complete access to user data In compari- 
son to network or server surveillance. Every bit of data sent, received, viewed, played. 
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or typed on a computer is vulnerable to client-side surveillance, though most client 
surveillance tools collect all possible data. Malware mostly targets vattous sorts of di- 
rectly profitable data, including e-mall addresses and bank account Information. Hie 
most sophisticated anti-virus tools monitor all data stored on and transmitted to the 
computer, checking the data for malware signatures, but not keyboard or screen activ- 
ity. Market research tools like ComScore typically monitor all network traffic, whether 
encrypted or not, but not stored data or keyboard or screen activity'. Workplace and 
family monitoring tools usually monitor keystrokes and periodic screenshots of the 
activity on the computer screen but not stored or network data. The GhostNet report 
demonstrated that active malware Is even capable of activating and recording the web- 
cams and microphones of infected computers. 

Indeed, the biggest problem for client surveillance tools Is often dealing with the 
sheer amount of data. For example, even one screenshot a minute on a single com- 
puter can generate a daunting amount of data. This problem Is magnified when ap- 
plied over a large set of monitored clients. Botnets (networks of malware-infected 
computers controlled from a single point) only search for a limited set of data, like 
credit card numbers, which they can easily sell, presumably because of the difficulty 
(and therefore unprofitablllty) of sifting through the vast trove of other sorts of data 
on Infected computers. Likewise, a primary challenge of corporate anti-virus systems 
that must manage entire networks of clients Is to manage the resulting flood of data 
about infections and vulnerabilities In a network of clients. 

Nonetheless, any cllent-slde program has at least the potential to access every sort 
of data that resides on or passes through the computer. So, a keylogger may only mon- 
itor keystrokes, but that restriction Is mostly the choice of the tool (and Its developers) 
once It has been Installed. Even non-survelllance-orlented programs (screen savers, 
games, chat programs, and so on) potentially have complete access to data once they 
have been Installed. Most computers try to make It difficult for an arbitrary program to 
take over a computer, but a constant stream of vulnerabilities gives client programs ac- 
cess to the entire computer. And this same level of access applies to most hardware 
devices Installed on the computer as well. Even devices that do not directly have the 
ability to access a shared bus or run a driver may have the ability to Infect clients with 
malware, as shown by cases like virus-carrying digital photo frames.** 

Unlike server and network surveillance, client surveillance Is always theoretically 
detectable. Any change In the client behavior (whether processing data, storing It, or 
sending It over a network) requires some detectable change to the client. In practice, 
there Is a long history of surveillance tools using increasingly sophisticated methods 
to hide themselves, including through rootklts that embed themselves into the deepest 
layers of the client operating system. But even with these sophisticated methods, there 
are always small changes in behavior that at least theoretically make the tools detect- 
able. But detecting these small changes in the large number of malware, spyware, and 
other surveillance tools Is beyond the capabilities of even the most sophisticated user. 
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Detection of the most advanced client suivelUance tools requites the use of some other 
monitoring tool, such as an antl-vlrus system, designed specifically for this purpose. 
The latest versions of malware and other surveillance tools change themselves con- 
stantly to avoid detection even by sophisticated antl-vlrus systems. This cyde of in- 
creasingly sophisticated detection and evasion requires constant monitoring of every 
networked client, by and-vlrus tools, by mal- or spyware, or often by both. 

In a strict sense, the EU data retention directive applies directly only to network and 
server monitoring. But the routers that will be used In the implementation of the direc- 
tive to collect network data are client devices themselves. As such, they are vulnerable 
to a stack of hardware, operating system, and applications |ust like any other client. 
Any actor within that network may potentially have access to the data, so adding the 
monitoring box to the ISP network potentially adds all those actors to the network 
trusted with the dlent data. Most of those actors (including hardware manufacturers, 
operating system developers, application developers) have access to all the data poten- 
tially collected through network surveillance and not |ust the legally monitored data, 
so we have to consider the flow of both the actual and potential data mandated by 
the directive through this network of trust around the monltohng tools. The sophisti- 
cation of client surveillance tools at both collecting data and hiding themselves from 
detection demonstrates the possibility of an attacker installing such code undetected 
on a data retention tool. The number of well-publicized, active exploits against a range 
of routers (not to mention counterfeit routers) means that the risk of this occurring Is 
high. 

Conclusion 

This chapter provides a typology of the different sorts of Internet surveillance through 
cases about Internet surveillance tools. For each set of cases, It Is Important to focus on 
the actual and potential data monitored and networks of Oust through which the data 
necessarily flow. This typology Is Intended to serve as a starting point for analysis 
of the steady stream of cases about Internet surveillance; for the analysis of those 
cases not only from a technical frame but also from social, political, legal, and other 
frames; and for the application of the resulting road map to specific questions about 
surveillance that arise over time. As new stories about surveillance emerge, this road 
map can provide a context for determining whether and In what ways those 
stories tell us anything new about Internet surveillance. For example, one might ask 
whether recently reported iPhone viruses represent a new sort of surveillance or 
how the monitoring required for Comcast's BltTorrent throttling (desenbed in the 
U.S.-Canada Overview presented later in this book) compares to existing examples of 
surveillance. 

This typology also provides a frame for considering the Impact of the EU data reten- 
tion directive, which Is likely to have Important effects beyond Its explicit scope. These 
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effects apply both to the data potentially accessible to monitoring and to the way users 
will relate to the networks of Ousted actors who have access to these data. As the cases 
about client tools show, surveillance Is both widespread and very difficult to detect on 
a range of client devices. Including the routers and other computers necessary to imple- 
ment the EU directive. As a result, an unintended outcome of the directive will be that 
both the mandated data (senders, recipients, and time stamps) and the potentially col- 
lected data (the content of the whole data stream) will be exposed to potential access 
by a whole network of new actors. The cases about server tools and surveillance show 
that the directive's requirements, when applied to server-side companies like Google, 
will have the effect of Increasing the data stored by those companies and thereby fur- 
ther pushing the already strained trust relationship between users and servers. Similar 
mandates related to data retention should be viewed In a similar context of growing 
Internet surveillance practices In the OSCE member states and elsewhere around the 
world. 

Finally, the cases about network surveillance show that many users. Including many 
of the serious criminals that the directive Is meant to track, have an Incentive to 
choose to use available rerouting methods to avoid monitoring. The Increased use of 
rerouting proxies will both pose a privacy risk to those users and potentially route a slg- 
nllkant portion of EU Internet traffic through countries unfriendly (at least In terms of 
data sharing) to the EU. As a result, the Intended purpose of the EU data retention 
directive may be thwarted in dangerous ways. The unintended consequences of the 
EU data retention directive are likely to prove costly. 
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Introduction 

While providing an innovative platform for global communications and economic 
transactions, the Internet brings some of society's worst ailments, such as the prolifer- 
ation of Images of child abuse. Into the public sphere. Every day. children are sexually 
abused, and graphic Images of this exploitation are transferred over the Internet to a 
global audience . 1 Despite a near worldwide consensus on the Illegality of the trafficking 
of Images of child abuse (often referred to as child pornography) on the Internet, effec- 
tive International cooperation on this Issue remains elusive . 2 Instead, an Increasing 
number of countries are simply hiding online child sexual abuse through the cosmetic 
practice of Internet filtering — the technical blocking of Internet content within a 
country’s territorial boundaries — rather than cooperating Internationally to remove 
such content at Its (foreign) source and subsequently prosecuting those who produce 
and traffic In Images of the sexual abuse of children. 

However, there was an early recognition among diverse International actors that 
tackling the problems posed by new Information communication technologies (ICT) 
would require potentially new forms of cooperation. These forms of cooperation em- 
phasize sustained communication and Interaction among a community of diverse 
actors spanning supranational Institutions such as the European Union, national gov- 
ernments, law enforcement, private industry Including Internet service providers 
(ISPs), and nongovernmental organizations. This concept of "dynamic cooperation" 
constitutes not |ust the outcome of an agreement reached through bargaining, but 
the ongoing practice of cooperation In which actors must rely on each others' capabil- 
ities for continual implementation in situations where compliance cannot be achieved 
solely through unilateral means. 

While the prospect of dynamic cooperation was consistently raised In International 
deliberations concerning the challenges of combating child pornography and Ids, It 
Is not reflected in official outcomes such as declarations and conventions. Moreover, 



preliminary evidence Indicates that the Introduction of Internet filtering, to prevent 
accidental access to child pornography, correlates with decreasing efforts to have images 
of child abuse removed at the source. As a result, child pornography Identified and fil- 
tered by one country remains available on the Internet and Is accessible In other coun- 
tries. This situation occurs among countries that participate In Institutions designed to 
facilitate cooperation targeting the source of the child pornography. Thus, countries 
that participate In the institutions dedicated to removing child pornography — such as 
International law enforcement task forces. Including the Virtual Global Task Force and 
the Innocent Images International Task Force, as well as the INHOPE association of 
“hot line" providers— filter Internet content located within each other's territorial 
boundaries. 

This evidence suggests that traditional cooperative mechanisms may have un- 
intended consequences that conflict with rather than complement dynamic coopera- 
tion. This potential conflict raises the concern that contemporary cooperative 
Institutions do not have the capacity to meet the global challenges posed by the prolif- 
eration of ICTs. This chapter argues that the dominant conception of cooperation, the 
domestic implementation of the results of bargaining, obscures potentially new forms 
of dynamic cooperation at the international level. A conceptual shift in the under- 
standing of what constitutes cooperation Is required to capture this emergent practice. 

In this chapter, I present an analysis of the widespread adoption of filtering as the 
primary’ solution to combating the proliferation of child pornography on the Internet. 
While International agreements concerning the protection of children played a role In 
spurring state action, the emphasis on domestic Implementation over dynamic cooper- 
ation facilitated the preference for filtering as the solution to the problem of Internet 
child pornography. Internet filtering Is a solution that states can Implement domesti- 
cally Irrespective of International agreements, and It does not require sustained cooper- 
ation. The goal of filtering Is to block domestic access to Internet content located In 
another country. Dynamic cooperation — In contrast to blocking domestic access 
to forelgn-hosted child pornography — refers to the continual cooperation necessary to 
have forelgn-hosted content removed at Its source. 

Within this context, I trace how filtering has been constituted as a solution to the 
problem of Internet child pornography and how Its Implementation was made possible 
by delinking the Issue from three key factors: the Interpretation of filtering mandated 
by the state as a form of censorship, the effect of filtering on freedom of expression as 
a result of technical deficiencies, and the overall effectiveness of filtering technology 
Itself In combating Internet child pornography. 1 present a preliminary analysis of the 
ways In which the continued emphasis on domestic implementation may be affecting 
attempts to move toward dynamic cooperation on this Issue. Finally, 1 suggest areas for 
further research that result from treating cooperation as a dynamic practice rather than 
an Instance of bargaining and domestic Implementation. 
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Following the methodology outlined by Richard Price, this chapter does not locus on 
causal explanations, but emphasizes historical contingencies that reflect Ideational 
contests and deflnmg moments in international agreements, conferences, and events 
concerned with the Issue of child pornography. 4 The chapter will employ a genealogi- 
cal method as a means of understanding how the conception of cooperation as domes- 
tic Implementation emerged In the International arena concerning the Issue area of the 
protection of children. It will trace how the discourse of domestic Implementation 
overshadowed that of dynamic cooperation and thus enabled the practice of filtering. 
It examines the role of discourses and power in redefining filtering from an ineffective 
tool of state censorship to one of effective cooperation. The following Is not a compre- 
hensive history of International efforts to protect children or of Internet filtering but, 
following Price, an analysis of events that "provide discursive moments" and reflect 
"crucial dimensions." 4 Such an analysis detects the unsuccessful attempts to constitute 
cooperation as more than an outcome of bargaining but as a dynamic practice based 
on sustained communication and Interaction. 

Competing Perceptions of Cooperation 

An analysis of the texts of key International agreements and conferences focused on 
the rights of children highlights a tension between perspectives that view cooperation 
as the Implementation of domestic laws and procedures by states and those that see It 
as constituting the continual practice of interaction and information sharing between 
a diverse set of actors. This becomes particularly evident with the rise of new commu- 
nications technologies and the complex set of problems, including the proliferation of 
child pornography, that result. It also reflects a dynamic between state and nonstate 
actors that emerged as a result of the prominent role that nongovernmental organiza- 
tions (NGOs) played In international conferences and agreements concerning the 
rights of children. 

While given an arguably low priority In International political affairs, children have 
constituted an Important Issue at the International level. 4 Primarily framed In terms of 
human rights, children have been singled out for protection In International agree- 
ments as far back as the Declaration of Geneva, which was adopted by the League 
of Nations In 1924.® A more specific emphasis on children followed with the United 
Nations' (UN) Declaration on the Rights of the Child adopted in 19S9. This declaration 
put forward ten principles that emphasized diverse Issues such as the child's right 
to nutrition, education, and nationality. The protection of children from forms of ex- 
ploitation was also explicitly raised, as was a prohibition on any forms of trafficking in 
children. 7 Although these Declarations firmly entrenched the Issue of children on the 
International agenda they were not legally binding on states and did not "lay down 
precise obligations for states." 8 
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The UN Convention on the Rights of the Child (UNCRC) was adopted in 1989 after 
11 years of negotiation among the UN and its related bodies such as UN1CEP, as well as 
the International Committee for the Red Cross and many NGOs * In fact. NGOs were 
instrumental in the development and adoption of both the 1924 and 19S9 declara- 
tions as well as the 1989 convention. Nongovernmental organizations played a critical 
role in ensuring that a legally binding agreement was reached. Moreover, particular 
elements including "articles which give the child protection against sexual and other 
exploitation, traffic, torture, and armed conflicts" would have not been Included were 
It not for the determined eflorts of NGOs.' 0 However, while the role of international 
cooperation was acknowledged, the convention relied heavily on domestic mecha- 
nisms and little on the "international machinery" required to enforce these rights." 

The United Nations created the Special Rapporteur on the sale of children, child 
prostitution, and child pornography in 1990, but Its emphasis was also domestic imple- 
mentation. However, by 1994 an increasing awareness emerged concerning the lack of 
International cooperation, including a UN General Assembly resolution calling for the 
“need to adopt efficient international measures" in addition to domestic solutions- 12 
The Special Rapporteur began to highlight the international character of the problem 
of child sexual exploitation by framing the issue in terms of states that fall on the de- 
mand or supply side of the problem. 13 By 1995, the Special Rapporteur began to note 
the impact of new communications technology on legislation and jurisdiction, noting 
that "new technology gave birth to concepts and applications like cyberpom or audio- 
pornography, not envisaged by most legislation" and that when “materials cross na- 
tional boundaries the determination of the forum having jurisdiction over the offence 
will also pose a problem." 14 The Special Rapporteur represented an early attempt to 
sustain cooperation after the UNCRC was adopted In 1989; however, it was confined 
to an advisory role. Although the ability* to make recommendations helped in terms 
of agenda setting and raising the profile of the issue, it fell well short of facilitating sus- 
tained cooperation. 

The 1996 World Congress against Commercial Sexual Exploitation of Children 
(CSEC) was the result of the considerable efforts of End Child Prostitution in Aslan 
Tourism (ECPAT), a child advocacy NGO, and UNICEf. The congress centered on the 
UNCRC and culminated in the Stockholm Declaration and Agenda for Action. Despite 
the growing awareness of the challenges posed by the rapid expansion of Internet tech- 
nology. the Stockholm Declaration and Agenda for Action contains no mention of the 
Internet. Instead, they focus on the promotion of national laws and policies that 
would allow states to meet their obligations under the UNCRC. The Stockholm Decla- 
ration encourages states to develop national plans of action to combat child exploi- 
tation. Despite some recommendations focused on Increasing communication and 
cooperation among states, civil society, and international organizations, the primary 
emphasis of the document is on domestic state action. In fact the document explicitly 
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states that the "primary task of combating the commercial sexual exploitation of chil- 
dren rests with the State and families." 1 s 

However, the extensive background paper on child pornography presented at the 
conference as well as the congress's child pornography panel all highlighted the role 
of new technologies, particularly the Internet, and the global character of the problem. 
It was argued that, whereas domestic legislation and Increased enforcement led to a re- 
duction In the production of child pornography In the 1980s, video and Internet tech- 
nologies were dramatically changing the production and distribution of Images of 
child sexual abuse. The background report concluded that domestic efforts, such as 
updating legislation to cover criminal activities made possible by new technologies, 
must be "supported by global cooperation of an enormous magnitude." 16 Although 
Increased enforcement of domestic legislation led to a decrease In child pornography 
In the 1980s, such methods would not be sufficient to deal with the problems posed 
by new technologies: 

Regulation of child pornography in the computer age presents special challenges that require con- 
siderable technical expertise. ... The establishment of an international resource organisation 
which would employ a team of specialists in the areas of investigation, law enforcement, beliav- 
ioural science, prosecution, law and computer technology could be an invaluable resource for the 
global community. 17 

Although It does not explicitly' suggest reconceptualizing cooperation as a sustained 
practice. It does strongly Indicate that the problems posed by new technologies require 
more than domestic Implementation by states. It does clearly articulate that past prac- 
tices, such as domestic legislation, would be Insufficient. These debates are not reflected 
In the formal outcome of the congress. 

The International Conference on Combating Child Pornography on the Internet in 
1999 focused almost exclusively on child pornography and new communications tech- 
nologies. This conference also marked the Introduction of filtering as an option to deal 
with the problem. However, the discussion of filtering was limited to applications at 
the Individual level In order to "empower Internet users.” Efforts at the national and 
International level focused on Increasing International cooperation, since Internet 
child pornography "does not know or respect borders." 1 * 

The fight against this abuse cannot be dune alone but only through strong international coopera- 
tion. among governments, particularly law enforcement agencies, but equally important between 
States and tile Internet industry, hotline* and non-governmental organizations. 17 

The result of the conference, the Vienna Commitment, called for "common measures 
to speed up and enable the transborder use of coercive powers such as transborder 
computer search and seizure" In conjunction with government, law enforcement, and 
the Internet industry. 20 It explored the relationship between law enforcement organi- 
zations, Internet service providers, and "hotlines" to which Illegal content could be 
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reported. These "hotlines" had recently formed an association known as INHOPE in 
order to increase sustained cooperation based on the development of "common good 
practices" to facilitate the "exchange of reports Internationally." 21 The heavy focus on 
technology and the Inclusion of diverse actors signaled the emergence of a conception 
of cooperation as a sustained practice. 

While the Vienna Commitment was explicitly recognized by the UN’s Optional Pro- 
tocol to the Convention on the Rights of the Child on the sale of children, child pros- 
titution, and child pornography, which was Introduced In 2000, Its emphasis on 
sustained cooperation as a response to the challenges of new technologies was not. 
While noting challenges posed by the Internet In the preamble, the actual text of the 
document does not explicitly mention new technologies, nor does It provide for mech- 
anisms of sustained cooperation. Instead, the Optional Protocol focuses primarily on 
domestic Implementation by highlighting Issues of legislating criminal offenses Into 
national law. The Optional Protocol, which has been the basis of action against child 
pornography since 2000, constitutes cooperation as a form of domestic Implementa- 
tion and does not reflect the diversity of discourse on the Issue of child pornography. 22 

Recognizing the challenges posed by new communications technologies, nonstate 
actors devoted considerable efforts toward broadening the conception of cooperation 
to include practices that leveraged the continual and coordinated efforts of multiple 
actors. However, these efforts are not reflected In official declarations and conven- 
tions. The official discourse thus heavily favors solutions that can be domestically 
Implemented. 

The Emergence of Filtering 

Filtering technology emerged In 1995, and by 1999 authoritarian states had already 
Implemented such technology to block access to political content at the national 
level. a Inspired by these developments, studies concerning the role of the state In reg- 
ulating access to Internet content at the national level through technical means began 
to emerge in democratic states. However, these studies concluded that Altering tech- 
nologies deployed at the national level would be Ineffective and would have the un- 
intended consequence of harming freedom of expression online. M 

At the International level, deliberation on the role that technology could play In 
combating Internet child pornography was also taking place. The Second World Con- 
gress against Commercial Sexual Exploitation of Children held In 2001 resulted In the 
Yokohama Global Commitment, which encouraged states to "take adequate measures 
to address negative aspects of new technologies. In particular child pornography on 
the Internet." 24 However, the specific measures to be taken are not speclAed. While 
articles emphasizing cooperation reflect the need to Include diverse actors, their role Is 
conflned to one of supporting state actors In Increasing the effectiveness of domestic 
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measures taken to protect children. However, documents presented during the confer- 
ence reflect a broader debate. 

The Theme Paper on Child Pornography presented at the conference does focus on 
the challenges of sustained Interaction. It highlights the successes and challenges of 
coordinated eflorts of law enforcement agencies from multiple states to arrest and pros- 
ecute those Involved with the production and exchange of child pornography. It noted 
that "closer working relationships" were required between law enforcement agencies 
worldwide to further "greater co-operation within the International law enforcement 
community." 26 In conjunction with the need to cooperate, the paper also makes clear 
that technology can play a role. The technological focus of the paper was devoted 
to technologies that can Identify and remove, as opposed to filter, child pornography 
online. 

Software developers have a particular responsibility to develop technologies which tan locate 
child pornographic Images on the Internet more swiftly, and allow foe their rapid identification 
and removal . 27 

The report noted the increased use of filtering technology at the Individual level but 
warned that "none of this software Is perfect and It would be wrong If parents thought 
of It as being a substitute for sound advice and appropriate supervision."** Moreover, 
the report noted that Increasing public demand to do something about the problem of 
child pornography online was leading to the preference of restrictive technologies, 
such as filtering at the national level, and warned of possible negative unintended 
consequences: 

Unless the Internet industry. Governments and the civil society can find a convincing way of 
assuaging these strong concerns which are beginning to surface, public opinion will sooner or 
later force pohticiuis to consider forms of intervention which could rob us of much tint it is truly 
marvellous, dynamic and revolutionary about the Internet.® 

With the exception of a growing number of authoritarian countries using filtering to 
Impose political censorship, democratic states had not implemented filtering at the na- 
tional level » In 2004 the role of filtering technology was thrust Into the International 
spotlight. In the United States, the Pennsylvania state legislature passed a law In 2002 
that required ISPs to block access to Web sites suspected of hosting child pornography. 
When the Pennsylvania attorney general's office Identified Web sites containing child 
pornography, they Issued an Informal notice to ISPs requiring that access to these Web 
sites be blocked. The ISPs subsequently blocked access to these Web sites. Because of 
the nature of ISP networks, these ISPs blocked access nationally, since they were tech- 
nically unable to differentiate users located In Pennsylvania. 31 

However, civil liberties organizations challenged the law in court, arguing that these 
Informal notices constituted "secret blocking orders" Issued by the stale and thus vio- 
lated the First Amendment of the U.S. Constitution. Moreover, they argued that the 
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technical filtering process implemented by ISPs resulted In large-scale overblocking 
that further violated free speech nghts. Ultimately, the Federal District Court in Phila- 
delphia ruled that the law violated the First Amendment. This ruling details the pro- 
cess, both legal and technical, that led to the blocking of 1.5 million legitimate Web 
sites while trying to block access to approximately 400 Web sites suspected of contain- 
ing child abuse Images. The decision by )udge Jan E duBols stated: 

There a little evidence that the Act lias reduced the production of child pornography or the child 
sexual abuse associated with its creation. On the other lsand. there is an abundance of evidence 
that implementation of the Act has resulted in mass in suppression of speeds protected by the 
First Amendment. u 

The decision explicitly confirmed what had been Implicitly noted by NGOs through- 
out their Involvement In international agreements and conferences on child pornogra- 
phy: stale- man dated national filtering was technically Ineffective and posed a threat to 
the right of freedom of expression. While the case of the United States may be excep- 
tional given the strong preference for the First Amendment guaranteeing the right to 
freedom of speech, the events In Pennsylvania did not go unnoticed. A report pub- 
lished In 2004 by UNESCO after the World Summit on the Information Society In 
2003 noted that some countries were beginning to follow the legislative approach of 
the United States by Introducing their own legislative efforts to "require the Implemen- 
tation of filleting at ISPs and gateways."* 1 However, these attempts were plagued by 
the same Issues faced In the United States, and widespread adoption did not occur until 
filtering was reconstituted as a legitimate practice. 

The Legitimization of Filtering 

The legitimization of filtering centers on three Interlocking developments: a model of 
Implementation In which the role of the state Is reduced, the delinking of filtering and 
free speech concerns through technological developments, and a reframing of the ef- 
fectiveness of filtering. 

In 2004, Bfitlsh Telecom (BT), the largest ISP In the United Kingdom, and the Inter- 
net Watch Foundation (1WF), a "Up line" for reporting Illegal online content, developed 
a partnership in consultation with the government. 34 British Telecom agreed to block 
access to a list of Web sites complied by the 1WF. This model of private partnership 
removes the need for government to implement leglslaUon requiring ISPs to filter — It 
Is a voluntary private Initiative. This development changed the perception of filtering 
from one of state lmposlUon to one of private IniUattve. While technically a private ar- 
rangement, the state's involvement In the process leading to the lmplementaUon of fil- 
tering allowed ft to retain some Influence. 35 British Telecom's filtering system, known 
as Cleanfeed, was designed to be extremely precise and cost effective. 36 Cleanfeed ele- 
gantly avoids the pitfall of overblocklng, the key objection that was consistently raised 
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with respect to filtering. This Innovative system created a Hood of interest from ISPs 
worldwide and received an endorsement from the leading child advocacy group 
ECPAT.” 

The Cleanfeed filtering system was promoted as a method to Mock Inadvertent ac- 
cess to child pornography. The reduction of the scope of the mandate to simply in- 
advertent access protected Cleanfeed from the charges of Ineffectiveness that plagued 
earlier filtering technologies. While those determined to access such content could eas- 
ily circumvent the filtering system, Cleanfeed is in fact efiectlve at blocking Inadver- 
tent access. 55 The advocacy group ECPAT, whose background documents submitted to 
the World Congress against Commercial Sexual Exploitation of Children had been crit- 
ical of filtering, now added filtering to Its model National Action Plan. The National 
Action Plan, which has Its roots In the first World Congress against Commercial Sexual 
Exploitation of Children held in 1996, now recommends "cooperation arrangements 
between ISPs and police In place to block Illegal content." 5 * Following the UK’s lead, 
numerous countries began Implementing national filtering systems, including Norway 
(September 2004), Germany 40 (February 2005), Sweden (May 2005), Denmark (Octo- 
ber 2005), Canada (November 2006), Switzerland (January 2007), Italy 41 (January 
2007), the Netherlands 42 (September 2007), and Finland (January 2008).“ 

The rapid spread of filtering across numerous democratic countries was enabled by 
conceptual and technological changes that legitimized filtering. 44 Countries that had 
previously shunned the practice now embraced It. From a traditional perspective the 
Introduction of filtering technologies can be seen as the successful domestic Implemen- 
tation of agreements such as the UNCRC. However, such a "thin” conception of coop- 
eration obscures the calls for sustained Interaction that emerged within the competing 
discourses In and around international conferences and agreements. Dominant dis- 
courses and key events sidelined conceptions of dynamic cooperation that key non- 
state participants advocated as a response to the challenges posed by new ICTs. 

Prospects for Dynamic Cooperation 

International cooperation often produces unintended consequences. These "side 
effects' 1 may be positive or negative. 45 Empirical evidence Is beginning to emerge that 
suggests that domestic filtering efforts may be acting as a disincentive to cooperate. 
Consistent with a conception of cooperation as domestic Implementation, filtering Is 
perceived as cooperation, thus conceptually negating the need to engage In dynamic 
cooperation. 

INHOPE Is an International organization founded In 1999 comprising state- 
delegated NGOs that operate "hotlines" that deal with the Issue of child exploitation. 
While distinct from the state, these organizations w'ere empowered with authority 
and legitimacy by their strong connections to the state. These domestic organizations 
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accept tips from the public and act to remove Images of child abuse If located within 
their territorial jurisdiction. They may also act within the INHOPE organization to 
have the content removed at the source by their International counterpart within 
IN HOPE One of INHOPE's major objectives is "to ensure rapid and effective response 
to Illegal content reports around the world by developing consistent, effective and se- 
cure mechanisms for exchanging reports between hotlines Internationally - and ensur- 
ing a coordinated approach Is taken." 46 It has been argued that "cooperation between 
members of INHOPE has facilitated the removal of Illegal content from the Internet 
and avoided the 'difficulties In the complex diplomatic procedures necessary for cross 
border cooperation of law enforcement authorities."' 4 ' 

Save the Children Is an NGO and a key member of INHOPE. In a 2003 position paper. 
Save the Children outlined a vision of dynamic cooperation that centered on INHOPE 
INHOPE Is the nexus that links Intergovernmental organizations, such as the European 
Union, primarily through national law enforcement organizations, the Internet Indus- 
try, and child advocacy NGOs. The report provides examples of interaction across these 
actors but particularly emphasizes the relationship between INHOPE and law enforce- 
ment leading to "high profile police-operations [that] have led to the infiltration |of] 
and legal action against International child pornography/abuse networks." 48 The vi- 
sion of INHOPE before the proliferation of filtering technologies In 2004 was clearly 
on the dynamic cooperation necessary to remove Internet child pornography at Its 
source and arrest and convict those found responsible for trafficking In such content. 

Many countries with representation In INHOPE have subsequently Implemented na- 
tional filtering technology to block access to foreign-host Internet child pornography. 
Some, but not all, members of INHOPE are now filtering such content. Including con- 
tent hosted within the territorial boundaries of other INHOPE members. 4 '' INHOPE 
reports that between September 2004 and December 2006 reports sent through the 
network between "hotlines" has decreased by 1 1 percent per year. 50 This decrease cor- 
relates with the Increase In the number of INHOPE countries that implemented filter- 
ing, although for a variety of reasons it does not Indicate causation. 41 Further research 
Is required to determine precisely why this decrease In cooperation Is oceurnng within 
the organization. 

However, even when there Is cooperation to have content removed at Its source 
(rather than filtered), there are still significant delays and limited effectiveness. In 
2006, the IWF, an INHOPE member, conducted a six-week test in which they found 
that 20 percent of the sites In their database remained active after having been 
reported to the relevant authorities In other countries. 5 * Moore and Clayton obtained 
2,S8S suspect domains from the IWF and noted that nearly all of them had been pre- 
viously reported and had removed Images of child sexual abuse. They found that 
"child sexual abuse Image websites fare worse than other types of offending content," 
such as phishing and copyright violations, when It comes to removal, with most last- 
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lng 719 hours after being reported. 5 * While the IWF has been successful within the 
United Kingdom, their own jurisdiction, they acknowledge that there are Web sites 
that haw been reported to relevant national authorities outside the United Kingdom 
that continue to remain active. 

Oise site, foe example, has been repotted to us 224 times since 2002; another lias been reported to 
us 54 times since 2000 and in that time lias been found on seven diferent servers in different 
countries; yet another lias been reported by us to the relevant authorities 32 times since 2005. 

Some of tile most prolific of these commercial child abuse websites have remained "live" for 
long periods of time, despite our conceited eflorts to the contrary. 94 of these websites reported 
by us to relevant authorities in 2006 are known to have been actively selling child abuse images 
In 200$. Indeed. 33 were "live" In 2004 and 32 were "live" prior to that. 

We regularly pass details of the websites and other intelligence to Interpol via our own police 
agency links, to interna tional hotlines and the apparent host countries' own police services to en- 
able them to launch a united assault ori the organised criminals selling images of child abuse. 
However, die ever-changing jurisdictions, the differing Uws. priorities and police responses as 
well as the varying cooperation of internet service providers around the world, mean that some 
countries face challenges to remove content. 1 * 

The factors that the IWF highlights as barriers to removing Images of child sexual ex- 
ploitation online illustrate the conception of cooperation as domestic Implementation. 
Once the report has been handed off to the relevant domestic authorities, no further 
action is taken. After analyzing takedown regimes In a variety of different circum- 
stances, including defamation, copyright violation, phishing, and child pornography, 
Moore and Clayton argue that Incentives rather than differences In law, penalties, and 
other factors influence the rate at which takedown successfully occurs. In cases of 
phishing, banks have a high level of Incentive to have the offending content removed 
and work with a variety of actors to achieve the takedown of such sites almost always 
without the use of courts or official channels. In contrast, the responsibility for the re- 
moval of child abuse Images Is delegated to the relevant national authorities and Is sub- 
ject to delay and neglect despite strong legal regimes. 44 Moore and Clayton argue: 

The Internet a multi-national. Almost everyone who wants content removed issues requests to 
ISPs or website owneis throughout the world, believing— not always correctly— tint the material 
must be just as illegal "there" as "here." Unexpectedly, in the one cue where the material is 
undoubtedly illegal everywhere, the removal of child sexual abuse image websites is dealt with in 
a rather different manner. Hie responsibility for removing material Isas been divided up on a na- 
tional basis, and this appears to lead directly to very long website lifetimes’* 

Not only do the domestic organizations charged with compiling lists of offending child 
pornography Web sites lack the willingness (or ability) to reach out to relevant non- 
state actors across national boundaries, but they also have a reduced incentive to do 
so because their own population Is "protected" from the offending foreign content 
through the use of filtering. 
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Conclusion 

This chapter presented competing conceptions of cooperation that emerged from a 
genealogical analysis of the developments that led to the Implementation of (iltenng 
to combat the proliferation of child exploitation on the Internet. In contrast to domi- 
nant perspectives that view cooperation as the state’s domestic Implementation of in- 
ternational agreements, this chapter presented the concept of dynamic cooperation. 
Dynamic cooperation constitutes a sustained practice In which actors, both state and 
nonstate, must continually interact to achieve Implementation. While not reflected In 
official declarations, the behind-the-scenes debates surrounding International efforts to 
protect children online reflected a concern that the problems posed by ICTs required 
potentially new forms of cooperation. These approaches emphasized continual interac- 
tion among a diverse set of participants In order to take down images of child abuse at 
their source. However, this conception of cooperation was unable to unseat the domi- 
nant discourse, and Internet Altering was ultimately legitimized and Implemented. 

The result Is a situation In which domestic organizations that have been delegated 
authority to combat the proliferation of child abuse images online lack the willingness 
or institutional capacity for dynamic cooperation. The Introduction of Altering tech- 
nology reduces the Incentive for organizations with an already narrow conception 
of cooperation to further engage with relevant counterparts across International boun- 
daries. Those engaging in the proliferation of Images of child abuse online remain 
largely unaffected by Altering technology, as well as takedown and removal efforts. 
They are able to exploit the lack of cooperation among international actors. Unlike 
the forms of cooperation emerging In other areas of content removal, such as those 
targeting phishing Web sites, efforts to combat child pornography are flamed and 
narrowly understood as the domain of states. There remain considerable barriers to 
dynamic forms of cooperation as a result. 

Problematlzlng cooperation contributes to a better understanding of the complex 
challenges facing the International community In the 21st century. It suggests that 
our existing Institutions may be unable to cope with the demands of problems exacer- 
bated by the proliferation of ICTs. It suggests that new norms and mechanisms 
designed to promote a deeper form of dynamic cooperation may be necessary. 
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Introduction 

When academics. Journalists, or Internet users discuss "Internet censorship," they are 
usually reterhng to the Inability of users In a given country to access a specific piece of 
online content. For instance, when Internet policymakers from around the world came 
to Tlinlsla for the 200S World Summit on the Information Society, they discovered 
that the Tunisian government was blocking access to several sites. Including Yeza.org, 
an online freedom of speech campaign. 1 

This model of Internet filtering, where Internet service providers (ISPs) implement 
directives Issued by government authorities and block connections to selected 
Web addresses, has been extensively documented by the OpenNet Initiative using ln- 
country testing. Identifying potential cases of filtering by ISPs Is likely to be easier in 
the future with the advent of took like Herdlct (www.herdlct.org), which Invite end 
users to be Involved with ln-country testing on a continuing basis. 

Given aggressive national filtering policies implemented in countries like Saudi 
Arabia, China, and Vietnam, state-sponsored ISP-level Web filtering has been an appro- 
priate locus for academic study. However, ISPs are only one possible choke point In a 
global Internet. As the Internet Increases in popularity around the world, we are begin- 
ning to see evidence of Internet filtenng at other points In the network. Of particular 
Interest are online service providers (OSPs) that host social networking services, blogs, 
and Web sites. Because so many Internet users are dependent on OSPs to publish con- 
tent, censorship by these entitles has the potential to be a powerful control on online 
speech. 

In this chapter. I look at recent developments In intermediary censorship In China, 
where unclear government directives mandate censorship by blogging hosts, but pro- 
vide little guidance for what content must be filtered. Confusion over U.S. trade restric- 
tions Is having a chilling effect on speech In the United States, where some OSPs are 
removing the accounts of users from sanctioned nations, including sensitive human 
rights Web sites. 1 examine the Incentives and costs OSPs face surrounding removal of 
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online content and argue that protection of online speech rights by these Intermedia- 
ries will require an affirmation of their role as free speech providers and clarification of 
applicable laws and regulations. 

Points of Control 

While filtering by ISPs was well documented as early as 2002, and commercial tools to 
filter Internet access In schools, libraries, and businesses have been available since the 
late 1990s, filtering at other points In the network Is a more recent phenomenon. 
Skype’s Chlnese-language client, built In cooperation with TOM Online, demonstrated 
that Internet filtering could be implemented at the client software level. In April 2006, 
Skype admitted that the co-branded Chinese version of the Skype text chat product fil- 
tered users’ messages based on a list of banned keywords.' In 2008, Internet researcher 
Nart Vllleneuve discovered that the TOM Skype software was not merely blocking key- 
words, but survellllng users, storing conversations where specific keywords had been 
mentioned. 3 

Examples like this Indicate that scholars of Internet filtering and censorship need to 
develop methods to monitor and study filtering at other points In the network an end 
user’s operating system, application software and hardware; Intermediate nodes In net- 
works, beyond ISPs and boundary* routers; Web hosting providers; and providers of 
social media services. 

Companies that provide Web hosting services or social media platforms are becom- 
ing Increasingly Important as possible choke points as Web users publish content on 
Web servers they do not control. In the early days of the World Wide Web, most Web 
sites were managed by organizations that controlled the content posted on the sites, 
the server software that delivered Web pages, and the server hardware that ran the 
code. While some Web sites are still vertically Integrated and managed, the vast major- 
ity of Web site developers rent server space from Web hosting companies or use free 
Web hosting services like Trlpod.com or Wordpress.com. 

These OSPs provide services to millions of users, most of whom would lack the 
means and technical skill to maintain their own Web servers. Sites that allow publish- 
ing In the context of more complex community Interactions, like Facebook or Live- 
Journal, would be extremely difficult for even a sophisticated user to reproduce. The 
unique dynamics of those communities require thousands or millions of users to share 
a single platform managed by a community host. While the ease of use of these plat- 
forms has been a great boon for online free speech. It has put a great deal of power In 
the hands of companies that provide Web site or community hosting services. 

Under pressure from local legal authorities, these companies can reveal sensitive in- 
formation about users. Yahool's Hong Kong office compiled with Chinese government 
requests for the Identity of a user who forwarded a memo documenting government 
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pressure on Chinese journalists to an overseas Web site. Armed with Information from 
Yahoo!, Chinese authorities arrested |oumallst Shi Tao and eventually sentenced him 
to ten years on charges of leaking state secrets.* These companies can also act as cen- 
sors, removing material that governments deem unacceptable In local jurisdictions. 
More unsettllngly, they may also remove material based on misunderstandings of local 
laws or based on calculations of fiscal and legal risk. 

Host-Based Censorship In China 

Studies of ISP-based Internet filtenng have characterized Chinese Internet filtering that 
was pervasive as early as 2Q02. 5 Bloggers and journalists refer to China's complex set of 
filtenng practices as the Great Firewall. It should not be a surprise, then, that China has 
pioneered censorship at the Web and community hosting level, as well as filtering con- 
tent by means of ISPs. 

In March 2004, Chinese authorities dosed down three blog hosts— blogcn.com, 
blogbus.com, and blogdnver.com — because of concerns that sensitive content was be- 
ing published on these sites. 6 After these sites reopened, the OpenNet Initiative found 
evidence that Chinese-based blogging providers were using lists of sensitive keywords 
to prevent controversial content from being posted to their Web servers. 7 In June 200S, 
Rebecca MacKinnon demonstrated that Microsoft was using similar techniques to 
block content on their Chlnese-language version of MSN Spaces — her attempts to start 
a blog titled ‘1 love freedom of speech, human rights and democracy" (In Chinese) 
yielded an error message that she translates as "You must enter a title for your space. 
The title must not contain prohibited language, such as profanity. Please type a differ- 
ent title." 8 

A report by Reporters Without Borders (RSF) and China Human Rights Defenders, 
released In October 2007, was complied with the help of an anonymous technician 
(Mr. Tao) working for a Chinese Internet company, presumably a company Involved 
with hosting user-generated content. The report. "A Journey to the Heart of Internet 
Censorship," 9 details training efforts to ensure that employees of content hosting com- 
panies censor sensitive content, and describes a weekly meeting at the Internet Infor- 
mation Administrative Bureau of the employees of Selling’s 19 leading Web sites. The 
meetings outline sensitive topics likely to be discussed In the coming week and provide 
Instructions on which topics are to be censored. 

While RSPs report details efforts aimed at coordinating content censorship In China, 
subsequent research by MacKinnon reveals that such censorship Is extremely unpre- 
dictable and subjective. In "China’s Censorship 2.0: How Companies Censor Blog- 
gers," 10 MacKinnon and students tested censorship systems on IS Chinese blogging 
providers, using a vartety of potentially sensitive texts taken from Chlnese-language 
blogs and news sites. Her team posted the text to author accounts on the IS platforms. 
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and checked to see whether (1) they were able to successfully post the material, (2) 
whether It remained posted 24-48 hours later, and (3) whether they could view the 
posted content from a Chinese ISP without using circumvention software. 

Results vahed widely. One of the blogging service providers tested blocked 60 of 108 
tested texts. Another blocked only one. MacKinnon was unable to find a single text 
blocked by all blogging providers, though she concluded that current news topics, 
which she terms "sudden Incidents" were far more likely to be blocked than other sen- 
sitive topics. She observes, "The wide variation in levels of censorship confirms that 
censorship of Chinese user-generated content Is highly decentralized, and that imple- 
mentation Is left to the Web companies themselves." 

While many countries block access to social media sites, 11 the vast majority of these 
blocked sites are managed and hosted In the United States. China’s unusual approach 
of filtering access to sensitive sites and requiring social media providers to censor their 
users reflects the large number of social media companies based In China, catering to a 
huge domestic market. The history of filtering and censorship In China may have led 
to an especially effective model. Since many popular online publishing platforms are 
filtered by Chinese ISPs, Chinese netlzens have gravitated to hosts located In China. 
Because these sites provide interfaces in Chinese, they are easier to use than U-S.-based 
sites. And while these sites engage In censorship to avoid government sanctions, most 
users will not notice the censorship until they try to post about sensitive topics. 

It Is somewhat surprising that we have not seen other countries that filter the Inter- 
net by means of ISPs Implement China's model of platform-based censorship. How- 
ever, Chinese companies have taken leadership in the social media world, while 
leading platforms for social media In many other countries that filter the Internet are 
located outside national control, generally within the United States. 

OSP-Based Censorship In the United States 

There is no evidence that the U.S. government Is demanding censorship of OSPs In 
the same way that the Chinese government has attempted to control social 
media. However, unclear U.S. laws may have led to situations in which U.S.-based 
OSPs have removed user accounts, effectively silencing those users, based on legal 
misinterpretations. 

Brenda Burrell Is used to worrying about censorship. As one of the cofounders 
of Kubatana, a civil-society organization based In Harare, Zimbabwe, she works with 
human rights organizations whose members are routinely harassed and Imprisoned 
for speaking in public or online. In a blog post, she notes that she Is used to fielding 
questions about what might happen If the Mugabe regime shut down her Internet 
operations. But on February 6, 2009, she was surprised to hear from BlueHost, an 
American Web-hostlng company, that Kubatana's Web site, along with the Web sites 
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of Women of Zimbabwe Arise and Island Hospice and Bereavement Service, would be 
disabled so that BlueHost would remain in compliance with U.S. Treasury Department 
restrictions. 12 

BlueHost, which had hosted Kubatana's Web site, told Burrell that her site was in 
contravention of section 13 of their terms of service, which read In part: 

Sanctioned Countries presently include, among others, Balkans, Belarus, Bunns, Cote d'Ivoire 
(Ivory Coast), Cuba. Democratic Republic ol the Congo, Iran, Iraq, former Liberian Regime of 
Charles Taylor, North Korea, Sudan, Syria, and Zimbabwe. ‘Sanctioned Countries' shall be deemed 
automatically to be added to or otlserwise modified from time to time consistent with the detexml- 
natton(s) of the government of the United States, and shall include all other countries with re- 
spect to which commercial activities are prohibited, embargoed, sanctioned, banned and/or 
otherwise excluded by determination^) of tlie government of the United States from time to time. 

1. Each Sanctioned Country, all governmental, commercial, or other entities located therein, 
and all individuals located in any Sanctioned Country are hereby prohibited from registering or 
signing up with, subscribing to. or using any service of BlueHost.Cam. ,, 

These are not the terms of service Burrell agreed lo when opening an account with 
BlueHost Archived copies of the BlueHost terms of service, retrieved via Archlve.org, 
do not contain section 13 — the section was evidently added sometime after February 
8, 2008 (the last date BlueHost's terms of service Is available via Archlve.org). 1 * Burrell 
was unaware of the change in terms of service until BlueHost alerted her that she 
would need to remove her Web ate or face Its removal. 

Burrell challenged BlueHost's decision, not by arguing that she was In compliance 
with their terms of service — she clearly was not — but by arguing that these terms 
of service misrepresented the U.S. Treasury Department's sanctions. The sanctions 
Zimbabwe faces are targeted lo the Mugabe regime, not toward all Zimbabweans. The 
U.S. Treasury Department's Office of Foreign Assets Control (OFAC) Is quite specific 
about who the sanctions target: 

Executive Order 13391 prohibits US. persons, wherever located, or anyone in tin United Stales 
from engaging in any transactions with any person, entity or organization found ta 1 .) be under- 
mining democratic institutions and processes in Zimbabwe; 2.) have materially assisted, spon- 
sored, or provided financial, material, or teclmologtcal support to these entitles; 3.) be or have 
been an immediate family member of a sanctions target; or 4.) be owned, controlled or acting on 
behalf of a sanctions target. Persons, entitles arid organisations referenced in Annex A ol the Exec- 
utive Order are all incorporated into OFACs list of Specially Designated Nationals (SDNs). 1 ’ 

It would be difficult for a company like BlueHost to evaluate whether Burrell and 
Kubatana were engaged In undermining democratic institutions. Fortunately, OFAC 
maintains a list of Specially Designated Nationals that U.S. companies are banned 
from doing business with — checking against this list is significantly simpler. 

Burrell forwarded the relevant OFAC sanctions documents to BlueHost's abuse 
department, sought asUstance from the U.S. Embassy In Zimbabwe, and mounted an 
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online campaign to pressure BlueHosl lo change Its policies. 16 Neither the explanatory 
e-mails nor public campaign swayed BlueHost or their CEO Matt Heaton. Burrell 
reports that Heaton communicated with her directly on the matter of the campaign, 
telling her that her supporters were "spamming" him and that he was unwilling to 
help her resolve the situation given this external pressure. 17 

Pressure from the Treasury Department, however, was ultimately successful Burrell 
received an e-mail from BlueHost on February 18 stating: 

Per request from the Treasury Dept, we have reactivated your account with Bluehost. With the re- 
lease from tile Treasury Department received today from Rachel Nagle of the Treasury Department 
via telephone and email confirming on February, 18. 2009 that you do not appear on OFAC’s list 
of Specially Designated Nationals and Blocked Persons we will continue hosting your website. 

We apologize for any inconvenience this may hase caused you. 

Burrell and Kubatana decided that the "Inconvenience" was significant enough that 
they moved their Web sites to a hosting company based In New Zealand and exempt 
from U.S. Treasury Department sanctions — the managing director of that company 
was alerted to Kubatana's status as a Zimbabwean nonprofit and affirmed his willing- 
ness to host their Web sites. 

Zimbabwean human rights organizations were not the only ones affected by Blue- 
Host's interpretation of U.S. Treasury regulations. Yaraslau Kryvoi, a Belarusian activist 
based In Washington, DC, saw his blog, promoting the Belarusian American Associa- 
tion, taken down by BlueHost. 18 1 Fathl, a prominent Persian blogger, reported that 
his blog, as well as several other Persian blogs, were being removed by BlueHost as 
they contravened Section 13 of the company's terms of service. 19 

Evgeny Morozov, reporting on the situation In iWwiwor*:, suggests that BlueHosf s 
decision was based on expediency: "Although BlueHost Is one of the world's biggest 
hosting companies, it probably does not have the time or resources to match the 
OFAC list with Its own customer ranks. Banning everyone from Belarus takes much 
less time and effort." He notes that BlueHost's terms of service are surprisingly 
sloppy — there's no nation called "the Balkans," and Morozov wonders whether Blue- 
Host plans on removing Romanian and Slovenian sites as well. 20 It ts worth noting 
that, despite Burrell’s successful protest and Morozov's article, BlueHost's terms of ser- 
vice still include a blanket block on usage from 1 1 nations, one region, and one long- 
deposed regime. 

The removal of Iranian, Belarusian, and Zimbabwean content Is deeply Ironic, given 
that the sites that w'ere removed were critical of the governments being sanctioned by 
the United States. The actions taken by BlueHost. either at the encouragement of the 
Treasury Department or because of their misinterpretation of Treasury regulations, 
had an effect opposite to what was Intended by those sanctions — by silencing criti- 
cism, the removal of these sites benefits the sanctioned governments. 
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An Emerging Trend? 

It Is possible that BlueHost may be on the leading edge of a new trend. Social network- 
ing site Iinkedln.com began blocking Syrian users from connecting to their site in 
April 2009. Anas Marrawl reported that Llnkedln began blocking Syrian users based 
on their IP In late March, but that Syrian users continued to use the site through filter- 
ing-circumvention software. On April 19, Marrawl reported that the site delivered a 
message to any users who had listed their home country as Syria when they logged 
on: "Access to this account has been suspended. Please contact Customer Service to re- 
solve this problem." He contacted customer service and was told that Llnkedln could 
no longer provide services to Syrian users.* 1 

Like Kubatana targeting BlueHost, Syrian Llnkedln users and their supporters began 
an online campaign to convince Llnkedln to reevaluate their policies. Jllllan York,** a 
U.S.-based blogger with strong ties to the Syrian online community, helped coordinate 
the effort, writing about the block on the Huflmgton Post 2 * and promoting the cause 
on Twitter. Through Twitter, she got In touch with Llnkedln’s senior director of corpo- 
rate communications, who quickly' Issued a mea culpa and promised a swift reversal of 
the decision. 24 Shortly after, Llnkedln Issued the following statement: "Some changes 
made to our site recently resulted In Syrian users being unable to access Llnkedln. In 
looking into this matter. It has come to our attention that human error led to over 
compliance with respect to export controls. This Issue Is being addressed tonight and 
service to our Syrian users should be restored shortly." 24 

It Is unclear what has motivated U.S. Web hosting and social media companies to 
ensure they are In compliance with Treasury restrictions and export controls. Like Blue- 
Host, Llnkedln has recently changed their terms of service. The current terms of service 
references export controls In Its opening section: "Your use of Llnkedln services. 
Including Its software, is subject to export and reexport control laws and regulations, 
including the the Export Administration Regulations ('EAR') maintained by the United 
States Department of Commerce and sanctions programs maintained by the Treasury 
Department's Office of Foreign Assets Control."*® An archived version of their terms 
of service, 27 from January’ 3, 2008, makes no reference to export controls or sanctioned 
countries. Users of hosting and social media tools who live In nations sub|ect to U.S. 
export controls or sanctions face an extremely confusing situation. Llnkedln, MySpace, 
and Blogger make reference to U.S. export laws, while YouTUbe, Facebook. Wikipedia, 
Rapldshare, and Wordpress do not. 28 

Web hosting companies are similarly divided — of the 22 top hosting sites, as tracked 
by Webhosting. lnfo,* v BlueHost, sister company Hostmonster, and hosting company 
One and One require users to certify that they are not from a list of specified countries. 
Network Solutions and BCentral offer a general caution that users must comply with 
U.S. export laws, and the other hosts do not mention export controls or sanctions in 
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their terms of service. (Based on an examination of current terms of service of the 22 
top sites as listed by Webhostlng.lnfo. One of the top sites does not offer a formal 
terms of service — it controls hundreds of thousands of domains itself, but has no cus- 
tomer relationships. Two sites serving China did not have terms of service available on 
their Web sites. Evaluation covers the remaining 19 sites.) 

In contrast to BlueHost's decision to deny service to over 300 million potential cus- 
tomers, sanctioned or not, other companies are taking a de minimis approach to com- 
pliance with U.S. government restrictions. Andrew McLaughlin, senior policy counsel 
for Google, notes, “We do the minimum to comply with the export restrictions and 
sanctions regimes. Primarily, this means (1) we don't allow downloads of software 
(Google Earth, e.g.,) containing cryptography from IPs believed to be In restricted 
countries (Cuha, Iran, North Korea, Syria, Sudan)— this Includes the Google download 
server and code.google.com; and (2) we don’t engage In any sort of money transactions 
Into or out of restricted countries. We do not, though, block access to publicly available 
sites where there are no downloads."* 0 Perhaps In reaction to the criticism the com- 
pany took for filleting search results In the Chinese market, Google has demonstrated 
a willingness to challenge government-mandated tillering measures. When South Korea 
passed a law requiring online postings to be accompanied by the author’s real name 
and ID card number, Google's YouTube division disabled commenting and video 
uploads from South Korea, but allows Korean users to state that they are posting from 
another country and post anonymously. 31 

The Economics of Intermediary Censorship 

Google may have decided to disable comments In South Korea to make a statement 
about how requiring Identification systems limits online speech. Or they may have 
been making a smart business decision — It would have required a major engineering 
effort for Google to build an Identity authentication system for YouTube In Korea. 
The decisions BlueHost. Llnkedln, and others have made make more sense in a context 
of business risk and reward, rather than In a free speech and human rights context. 

BlueHost advertises entry-level Web hosting for an annual cost of USD 83.40. Web 
hosting Is a highly competitive business, and profit margins tend to be quite tight. 
With professional legal counsel experienced In U.S. export and sanctions law charging 
hundreds of dollars an hour for advice. It Is an easy decision for BlueHost to sacrifice a 
handful of customer relationships In exchange for avoiding legal review. It is possible 
that Llnkedln made a similar evaluation and reversed course when public pressure 
Indicated that Unkedln’s cost in terms of public relations damage might be substantial 
for removing Syrian users. 

Wendy Seltzer Identifies the problem of "unbalanced Incentives" as a major concern 
In the United States' administration of the Digital Millennium Copyright Act (DMCA). 
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Section 512(c) of the DMCA provides "safe harbor" from liability due to copyright in- 
fringement If online service providers follow a prescribed procedure to remove copy- 
righted content when alerted by the copyright's owner.* 2 On receiving a properly 
completed notice, an OSP should promptly remove the content In question and alert 
the Individual who posted It, giving her an opportunity to respond with a countemo- 
dee to the party claiming Infringement — on receipt of this countemotlce, the OSP 
should restore the material to the Internet within 14 business days. 

Seltzer argues that OSPs have a great Incentive to take down potentially Infringing 
material (the threat of lltlgadon from movie studios or record companies), but signifi- 
cantly less Incentive to protect the First Amendment rights of users. Providers do not 
generally alert their users that they might have a fair use argument to defend their use 
of a piece of content or direct users to sites like Chilling Effects (www.chllllngeffects 
.org), a clearinghouse of Information on takedown notices developed by Seltzer and 
others. The Incentives for removing content are large, and they are small — and perhaps 
negative— for OSPs to encourage their users to fight takedown notices. If an OSP devel- 
ops a reputation for aggressively defending user rights. It Is likely to attract more users 
who generate Infringement claims. Each one of these claims requires time and legal 
resources from an OSP to respond to — as a result, OSPs have an Incentive to rapidly re- 
move potendally Infringing users and, perhaps, to discourage them from returning. 

Sjoera Nas and the Dutch nonprofit Bits of Freedom wondered whether Netherlands 
ISPs would defend user rights against complaints of copyright Infringement, so they 
mounted an experiment. In 2004, they opened accounts with ten Dutch OSPs and 
posted the same public domain text written by Eduard Douwes Dekker, better known 
by the pen name Multatull. Then, they sent complaints In the name of a fictitious Mr. 
Johan Droogleever, legal advisor to the E. D. Dekker Society, which claimed to hold 
copyright to the works and demanded their removal. Seven of ten OSPs compiled 
swiftly, without challenging the claim or demanding further Information, despite the 
fact that the e-mail came from a Hotmail address. However, ISPs generally alerted the 
fictitious customer to the takedown request. Nas concludes, "It only takes a Hotmail 
account to bring a website down, and freedom of speech stands no chance in front of 
the cowboy-style private ISP |ustlce." is 

Whether Seltzer or Nas Is coned In being concerned that copyright Infringe- 
ment complaints favor IP owners rights over user rights, the mechanisms for removing 
content suggest key weaknesses that censors could exploit. During the 2008 presiden- 
tial election, both the Obama and McCain camps found that campaign videos were 
frequently removed from YouTUbe. The videos In question generally featured small 
excerpts from broadcast television newscasts, and takedown notices were Issued 
by those broadcasters. The campaigns challenged the takedowns, arguing that their 
use of excerpts represented fair use. 34 Given the rapid-fire nature of political cam- 
paigns, the 14 business days It can take to restore a video to YouTUbe may effectively 
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constitute censorship. It seems likely that we MU see political rivals attempt to disable 
each other's online speech using spurious copyright claims, even though these claims 
run the risk of exposing a complainant to penalties for acting In bad faith. 

We are already beginning to see attacks on online speech that attempt to trigger an 
"Immune system response" from hosting companies. Irrawaddy, a leading Web site for 
Burmese dissidents, suffered a series of distributed denial of service (DDoS) attacks In 
September 2008. Other pro-dlssldent sites. Including the Oslo-based Democratic Voice 
of Burma and the New Era Journal, based In Bangkok, were rendered Inaccessible by 
DDoS attacks, prompting speculation that the attacks were the work of hackers hired 
by the Burmese government. iS As Irrawaddy struggled to fend off the DDoS attacks. 
Its hosting provider became Increasingly agitated, since the DDoS attack affected their 
other customers. For a period of time, the attack was so severe that Thailand's primary 
Internet connection was overloaded with DDoS traffic. The attack had the Immediate 
effect of making the site unreachable, as well as the longer-term effect of forcing Irra- 
waddy to find a new ISP. 16 

As with copyright takedown notices. OSPs have a strong incentive to remove "trou- 
blesome" users — DDoS attacks can require hours of expensive system administration 
time to fend off. For hosting accounts that generate little revenue, the cost of fending 
oft even a small DDoS Is likely to exceed profit margins, and OSPs have an Incentive to 
remove customers who have come under attack. Providers that develop a reputation 
for protecting their users from DDoS attacks are likely to attract customers who come 
under DDoS attacks. Increasing their costs. As such, some OSPs are comfortable remov- 
ing customers because they have come under attack. A libel lawsuit between Coloca- 
tion America and Archie Garga-Rlc hard son, whose Web site came under DDoS attack 
while hosted by Colocation America, makes It dear that OSPs are sometimes willing 
to remove customers generating thousands of dollars of revenue. 17 

Implications for Researchers 

While the underlying threats to speech are deeply different between the case of 
Chinese blogging hosts studied by MacKinnon and Ui.-based OSPs outlined here, a 
common theme emerges: threats to online speech come not |ust from government 
action, but from the needs of OSPs to Interpret and follow government regulations 
and to turn an operating profit. If this trend persists and grows, It has Implications for 
scholars and activists focused on this Issue. 

Scholars need to develop tools and methods to study corporate filtering of Internet 
content These methods might Incorporate the techniques pioneered by MacKinnon 
In testing Chinese Web sites for automated censorship, perhaps with development of 
more robust tools to help automate testing. They could also include a site like Chilling 
Effects focused on collecting reports of corporate censorship of content or an expan- 
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slon of the work of the Citizen Media Law Project to thoroughly document filtering 
and censorship by online service providers beyond the United States. Global Voices 
Advocacy, which now maps the accessibility of social media Web sites In different 
countries, may need to start mapping Web sites that ban users from certain countries. 

To the extent that confusion over U.S. Treasury and export restrictions Is leading to- 
ward the removal of Web sites and the understandable uncertainty of users in sanc- 
tioned counthes. It may be worth pursuing clarifications from the U.S. government. 
Clinical students at the Bet km an Center at Harvard are pursuing a formal request to 
the U.S. Treasury's Office of Foreign Asset Control to clarify the restnctlons that social 
media and Web hosting companies face In providing services to users In sanctioned 
countries. If the Berkman Center receives useful clarifications. It will need to develop a 
strategy to communicate these guidelines to the affected companies. 

Intermediary censorship by U.S. companies appears to be experiencing a steep and 
sudden rise. In May 2009, Vlneetha Menon reported that Microsoft had turned off its 
Windows Live Messenger service in Iran, Syria, Sudan, Cuba, and North Korea, citing 
OFAC sanctions.® It Is likely that Microsoft, BlueHost. and Linkedln are not acting en- 
tirely Independently — they may all be coming under pressure from the U.S. Treasury 
Department or another government authority. It would be useful for Journalists or 
researchers to determine whether there is an organized campaign to remove users 
from these five sanctioned countries from U.S.-based tools. Given the use of these tools 
by human rights activists and ordinary citizens, a policy of removing all users in sanc- 
tioned nations from these tools merits careful public debate. It Is possible that the 
most Interested opponent of U.S. Treasury policy might be the U.S. State Department, 
anxious to hear opposition voices In repressive nations. 

Imbalanced Incentives and Free Speech 

So long as It continues to be possible for for-profit OSPs to terminate difficult clients for 
arbitrary reasons. It Is likely that we will see providers "optimizing" their client base, 
providing services to customers who do not attract DDoS attacks or copyright or trade 
complaints. In a recent New York Times article. Brad Stone and Miguel Helft Introduce 
the troubling idea that social media sites may start restricting memberships for users in 
developing nations because they are finding It difficult to target ads to these users.® 

If these trends Increase, organizations dedicated to free and open speech, especially 
In developing nations, may find themselves needing to create OSPs specifically ori- 
ented toward the needs of users who are less fiscally appealing to social media and 
Web hosting companies. We can Imagine supporters of human rights creating OSPs 
explicitly to provide services for human rights organizations. 

This is probably a poor Idea. The cost structures of these organizations will be signifi- 
cantly higher than for traditional hosting providers, as they are likely to attract users 
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who come under attack by DDoS or who Introduce complex legal questions. Further- 
more. when human rights activists congregate on a small subset of servers, traditional 
ISP-level filtering becomes a more effective tool for censoring sensitive speech. If all 
sites critical of Burmese government policy are located on a single group of servers, 
that server Is certain to be blocked at a national level, and Is likely to come under sus- 
tained DDoS attack. By utilizing OSPs used by nonactivists, activists raise the social cost 
of traditional censorship — a country that chooses to block the Blogger.com domain to 
prevent access to a subset of blogs removes access from millions of uncontroverslal 
Web sites, alienating citizens. Individuals who were not Interested In the censored 
content become aware of the censorship when they can no longer access other 
Blogger.com sites. 

Rather than creating a subset of Web sites that protect speech. It would be vastly 
better to see OSPs affirm their roles as providers of free speech tools to users throughout 
the world. As discussed earlier, this Is a difficult decision for an organization, particu- 
larly a for-profit company, to make In Isolation. At the moment, companies seem to 
be choosing a legally cautious path, disabling access for users In sanctioned countries 
before experiencing pressure from activists. 

The experience of the successful protest against Unkedln's block of Syrian users sug- 
gests that one powerful tool activists have Is public protest. While companies may 
make a calculated financial decision to discontinue services to certain users, public 
pressure can add another factor Into the equation — the potential lost business from 
bad publicity. While the Linkedln protest shows the power of this strategy. BlueHosfs 
decision not to reconsider their terms of service shows that the Influence of public 
pressure may be limited. 

Given the importance of OSPs as a space for open, public speech. It is necessary to 
consider their responsibilities as common carriers. For OSPs to limit their liabilities as 
common carriers, they should be required to provide services to anyone legally using 
these services, even If their usage Is likely to attract DDoS attacks. To do otherwise Is 
to allow attackers a "heckler's veto," an ability to silence speech by creating a damag- 
ing and expensive response to that speech. If OSPs are required to provide services to 
any law-abiding users, an appropriate response to this form of Intermediary censorship 
Is legal action to address discrimination, not pubUc protest. An affirmation of OSPs' 
role as common carriers would not resolve the situation Iranian and Syrian users are 
facing, but It might Invite legal action that would force clarification of U.S. Treasury 
sanctions. 

Conclusion 

In countries like China, where online speech Is carefully monitored and controlled, we 
are likely to see Intermediary censorship emerge as an increasingly Important compo- 
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nent of a censorship apparatus. Filtering at the OSP level blocks content from reaching 
both local and international audiences, allowing more thorough control of online con- 
tent. The phenomenon is most developed In China, In part because existing Internet 
filtering strategies drive local users to publish on locally hosted sites, and in part be- 
cause linguistic constraints drive Chinese-speaking users to a particular set of tools. If 
filtering and language constraints drive users til the Middle East toward locally hosted 
tools, we might expect to see similar systems of OSP-based filtering emerge. 

As users around the world look to online services hosted In less controlled countries 
to find unfiltered venues to publish their content, other forms of content filtering are 
emerging. Online service providers have compelling financial Incentives not to host 
content likely to provoke DDoS attacks or raise complex legal issues. While clarification 
of relevant regulations may help reduce uncertainty* about what content can and can- 
not be hosted, there Is a danger that OSPs will stop providing services to some users. 
This tendency* needs to be counterbalanced by the sorts of public protest that called 
attention to BlueHost's and Unkedin's actions, but user’s rights will only be guaran- 
teed by an affirmation of common carrier status that explicitly protects rights to pub- 
lish on these platforms. 
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6 Protecting Privacy and Expression Online 

Can the Global Network Initiative Embrace the Character of the Net? 

Colin M. Mac I ay 


Introduction 

When Yahoo! became Interested In building upon the surprise success of Its services In 
Vietnam. It was not simply a matter of finding an established partner or setting up 
local servers, but began with a human rights Impact assessment This process sought 
to anticipate the potential risks to freedom of expression and privacy In Vietnam that 
might result from expanded operations, and to develop strategies to mitigate them. 
What could happen If the Vietnamese authorities determined a blog post to be Illegal 
and demanded Its removal, also requesting the author’s name? Ultimately, Yahoo! de- 
cided to make Its data harder to reach by hosting servers offshore (In Singapore), to re- 
duce vulnerability to external pressure by minimizing the number and responsibilities 
of staff (hiring only’ a local sales team, rather than people with operational control), 
and to implement a series of other policies Intended to limit avenues used by govern- 
ment to abndge human ttghts. 1 

Although the decisions implied slower service and less robust operations, Yahoo! 
placed those costs in perspective of previous very difficult and public lessons, most 
notably, the ugly aftermath of having provided Chinese authorities with Infor- 
mation used In the 2005 Imprisonment of Chinese |oumallst Shi Tao* This trade of 
near-term profits for principles (and hopefully, long-term gain) was Informed — and 
required— by a nascent multistakeholder effort called the Global Network Initiative 
(GN1), A of which Yahoo! Is a founding member. Participants evaluate human fights 
risks and seek opportunities to mitigate them when considering whether and how to 
enter a new market. Yahool’s motivations were likely diverse, but the actions were 
aligned with their mission, corporate health and profitability, 4 and the preferences of 
at least some shareholders. 4 

GNl's collaborative approach to compensating for the lack of effective legal and 
policy measures to protect and advance online privacy and expression extends far be- 
yond these assessments, recognizing that genuine progress requires a context of con- 
scious corporate commitment to meaningfully Integrate the protection of freedom of 
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expression and privacy Into both business practice and corporate culture. For Its part. 
In 2008, Yahoo! created the Business and Human Rights Program, supported by corpo- 
rate leadership, guided by principles and internal process, s tailed by cross-lunctlonal 
teams, tracking an Inventory of rights Issues, Informed by stakeholder engagement, 
and sub|ect to outside monitoring and accountability.' These internal developments 
are complemented, informed, and reinforced by Yahool's participation In the GN1. 

From recent postelectlon violence In Kenya and Moldova facilitated by mobile 
devices to vibrant online expression in Vietnam, ongoing battles over culturally sensi- 
tive (and legally prohibited) Imagery online in Turkey and Thailand, and the record 
proportion of online (ournallsts detained worldwide In 2008 , digital tools are associ- 
ated with voice and power, and governments realize It. Whether as part of the normal 
sociopolitical milieu or In a moment of crisis, they are increasingly aware not only of 
the power of new media, but also of the role of private companies in providing — and 
potentially limiting — that power. 

Governments also seem to be more cognizant of the unique characteristics of the Net 
as compared to traditional media, not only In terms of how these traits might allow It 
to threaten the status quo, but also where associated weaknesses can lie. However mis- 
takenly, many people have come to understand this vulnerability of Information and 
communication technologies (ICT) companies to government interference as the China 
Problem, owing In large measure to publicized Instances In which Microsoft, Yahoo!, 
and Google have failed to adequately protect their users' rights to freedom of expres- 
sion and privacy. Unfortunately, similar challenges are emerging around the world, 
oftentimes at the hands of democratic governments, and not only In the Global South, 
but also in the West. 7 

In response to these tensions and understanding the complexity of resolving them, a 
group of companies, civil society organizations, investors, and academics spent over 
two years creating a collaborative approach to protect and advance freedom of expres- 
sion and privacy In the ICT sector, and formed an initiative to take this work forward. 
Proposed by my colleagues John Palfrey and Jonathan Zlttraln in the book Aaess 
Denial and elsewhere, 8 the GN1 released foundational documents In October 2008 
and publicly launched in December 2008 on the 60th anniversary of the Universal 
Declaration of Human Rights. The group includes Google, Microsoft, and Yahoo!, 
along with numerous noncompany participants, such as Human Rights Watch, Hu- 
man Rights in China, Committee to Prolect Journalists, Human Rights First, Calvert 
Investments, Center for Democracy and Technology (CDT), and the Beikman Center 
for Internet and Society, where 1 work. 

The process has been rewarding and challenging, seeking to move beyond mistrust, 
hostility, and competition, drawing upon human rights experiences in sectors as far 
afield as labor and security, and balancing the perspectives and needs of the diverse 
participants. It began as three separate processes, driven respectively by companies, 
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scholars, and non-governmental organizations. In early 2006, a group of companies 
first met to draft an Industry code of conduct under the joint facilitation of Business 
for Social Responsibility (BSR) and the Berkman Center. That spring, Orville Schell 
and Xiao Qlang of the University of Callfomla-Beikeley's Graduate School of Journal- 
ism Initiated the creation of a code of conduct by academics, In collaboration with the 
Berkman Center. Meanwhile, CDT convened a third set of actors to deepen under- 
standing, raise Issue awareness, and seek solutions. Participants from the three pro- 
cesses met In Oxford In July 2006 and soon agreed to work together. 

This chapter examines the context In which GN1 has emerged, describes Its structure 
and Intentions, explores some concerns, and highlights some of the challenges GN1 
must address to fulfill Its Intended purpose. Issues that will Impact success Indude the 
tensions among structure and flexibility, aspiration and practicality, and refining 
known approaches and creating new ones. While these considerations play into many 
elements of the Initiative, they are particularly salient with respect to accountability 
and governance. 1 offer these thoughts as objectively as possible, recognizing my per- 
sonal participation throughout the process, to support collective understanding of 
both this process and emerging institutional approaches to governance In the knowl- 
edge society. 


Government and Business Collide: Expression and Privacy at Risk 

All over the world, companies in the 1CT sector face Increasing government pressure to 
comply with domestic laws and practices In ways that conflict with both core elements 
of their business and their users' fundamental rights to privately Impart and access in- 
formation and communication. Whether law enforcement officials request a user's per- 
sonal Information for unknown reasons or a takedown of content that is acceptable in 
other Jurisdictions, companies find themselves In an untenable position In which they 
must balance their obligation to respect local law with their responsibility to protect 
the rights of their users. Companies know that resisting a government is costly, per- 
haps placing their operating license and local employees at risk, but that acceding 
blindly can have terrible implications for them and their users, and that this tension 
Is ever more part of their business. A (more) sustainable solution is essential. 9 

Described most comprehensively by Palfrey and Zittraln In Access Denied and in- 
formed by the OpenNet Initiative's research, the problem has been framed In many 
ways, whether as an ethical Issue, a reckless drive for appealing markets, an Interna- 
tional legal question, a matter of Internet governance, a trade barrier. 10 or an organiza- 
tional deficit It Is clear that 1 CT companies (broadly Interpreted) face very real 
challenges with respect to freedom of expression and privacy. Left unchecked, govern- 
ments seem likely to chip away at these fundamental freedoms, potentially leading 
companies into a proverbial race to the bottom, with a possibly daunting impact 
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upon these liberties and the other rights they help to protect Responsible Interna- 
tional companies might also choose to withdraw from such markets In order to protect 
themselves against complicity, thereby further limiting the options of local users and 
sacrificing the opportunity to engage troublesome governments constructively. 

Under the guidance of the Special Representative of the Secretary-General of the 
United Nations on business and human rights, John Ruggle. the United Nations has 
developed the Protect, Respect, and Remedy Framework: "Each principle Is an essential 
component of the framework: the state duty to protect because It lies at the very core 
of the international human rights regime; the corporate responsibility to respect be- 
cause It Is the basic expectation society has of business; and access to remedy, because 
even the most concerted efforts cannot prevent all abuse, while access to (udldal re- 
dress Is often problematic, and non-|udlctal means are limited In number, scope, and 
effectiveness. The three principles form a complementary whole In that each supports 
the others In achieving sustainable progress." 1 1 

Ruggle’s work recognizes the tremendous power of business but points out that mar- 
kets work best when they exist in the context of rules and Institutions. While he Iden- 
tifies governance gaps created by globalization as a root cause of the often uneasy and 
sometimes negative relationship between business and human rights, he also notes 
that most businesses do not actually has'e systems to know when they are causing 
harm. 

Government Steps In: Policy and Regulatory Responses 

While business has focused Its requests on the executive branch, requesting bilateral 
assistance In Individual cases and on trade Issues, civil society has been more likely to 
call for proscriptive legal solutions, spurring significant legislative interest. 12 Such 
approaches face many challenges, Including law's tendency to trail technology because 
of Its rapid pace of change, evolving business models, unanticipated user behavior, and 
unpredictable government action, to say nothing of the cultural differences and |urls- 
dictlonal Issues associated with globalization and the Internet. These factors, combined 
with the desire to support continued Innovation and creativity in the 1CT space, sug- 
gest that specific legal Interventions or policy prescriptions may be premature, or may 
even risk taking a step backward. 

A s’arled group of supporters within the U.S. Congress has harnessed members who 
are rights supporters and China-watchers, liberals and conservatives, to raise Issue 
awareness. Holding frequent hearings and consldenng the Global Online Freedom Act 
(GOFA) 1 * annually for the past three years, their actions may occur at the Intersection 
of policy and politics, but they have created Invaluable urgency for companies to take 
action. Amid many other legitimate concerns, CUT has criticized GOFA for creating an 
adversarial relationship with companies, rather than a collaborate one. 1 * For Its part, 
the U.S. Department of State created the Global Internet Freedom Task Force to track 
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the Issue and engage with foreign governments, but along with the Department of 
Justice, the State Department also expressed concern over GOFA. 14 The shortest ver- 
sion of our analysis at the Berkman Center Is that GOFA Is simply too blunt, Impracti- 
cal, and Inflexible: although the GNI may provide the basis for law over time, we 
simply do not yet have a clear enough sense of the answers to mandate any particular 
approach, let alone the proposed one. 16 

European policymakers have likewise been active on Issues related to online expres- 
sion and privacy on both the substantive and the political fronts. The Council of 
Europe has offered actionable Insights, Including fostering understanding and develop- 
ing useful guidance for the Interactions between ICT service providers and law enforce- 
ment 17 and providing clear and detailed guidance on human rights Issues for ICT 
providers. >* The European Parliament weighed In on security and freedom online, call- 
ing for sustained engagement and expressing Interest in developing a multistakeholder 
Initiative. 19 It has also recommended the creation of a code of conduct for freedom of 
expression. 20 Parliamentarians from across Europe also introduced a version of 
GOFA. 21 leading Vlvlane Reding, European Commission Lead Member on the Informa- 
tion Society, to express concern over the "heavy" nature of the Instruments (Including 
the prospect of forcing companies to withdraw and leave markets to less scrupulous 
competitors) and to place promise In the GNI. 22 

Sadly, even as some governments seek to address this problem globally, numerous 
competing government efforts are under way that will abridge the human rights others 
are seeking to preserve. 21 While problems In developing and transitioning countries 
first caught the public eye, It Is the disconcerting legislation among early Internet 
adopters that has received attention recently. From proposals for national filtering in 
Australia to the South Korean government's requirement for real name registration, 
efforts to rein In perceived Internet dangers represent troubling examples for countries 
that are |ust beginning their policymaking efforts related to the Internet. 

Stakeholders Unite: Global Network Initiative 

Recognizing profound challenges associated with the broad spectrum of laws and 
practices related to freedom of expression and privacy in states around the world, 
as well as the laws and standards of home countries, employees, shareholders, and 
the International community, some ICT companies decided not to continue down 
this path in Isolation. The Initial framing was Inspired substantially by the Sullivan 
Principles, 2 * Introduced In 1977 as a code of conduct for 1)5. companies doing 
business In apartheid South Africa. An Indus try -code approach offered the potential to 
set a higher standard than If companies were left to fend for themselves, allowed them 
to benefit from the strength of their numbers, and It recognized the need for even 
dread competitors to unite around certain values — all while retaining control of the 
expectations. 
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But given the complexity of the cuirent situation — that It Is not simply about com- 
panies following the law (or divesting), but also about companies understanding when 
and how to challenge the law and avoiding conflicts and mitigating risk In the first 
place — Increased expectations alone would have limited Impact. Gaining a deeper and 
wider understanding of the pressures, developing supportive Internal process and 
structure, advancing global transparency, and engaging other stakeholders were judged 
equally Important — and best accomplished collectively. The perspective was not based 
slmpty on altruism, but established by recognizing the broader business case, including 
the fundamental social obligations of which companies have been clearly reminded by 
human rights organizations, academics. Investors, shareholders, and U.S. and Euro- 
pean policymakers through protest, legislation, shareholder resolutions, and public 
criticism- Ultimately, the companies recognized that they faced a serious business 
problem with profound Implications for all human rights. 

Conversations about developing a response began In early 2006, with a consensus 
emerging that underscored the Importance of collaboration across sectors, each recog- 
nizing that It required the other for understanding. Implementation, legitimacy, expe- 
rience, access, and so on. There was consensus that law and regulation were not 
currently attending to the challenges that Individual companies confronted In seeking 
to respond responsibly to government requests. An unlikely family was bom. Including 
former colleagues, current competitors, and long-time critics, and in which each group 
needed the other to accomplish Its goals and across which there was (perhaps) surpris- 
ing overlap. There was also a great diversity of views. In particular, on how best to 
achieve those goals, what to take as givens, and so on. 

Beginnings 

As the group moved from research and brainstorming to drafting, clear questions 
emerged. What was the proper balance between aspiration (as manifest in documents 
and language) and realistic, operational, and evaluable results? How high should the 
bar be set? How would the noncompany partners (and the world) know whether the 
company partners were Implementing (and maintaining) their commitments? What 
was the scope of the effort, in terms of company types, technologies, and business 
models? Should focus go beyond freedom of expression and privacy, extending to 
other rights, or to rule of law? What were the primary activities In which the group 
could begin to see results In the near term and create value over time? 

The group was able to exploit Its Institutional and Individual differences, using them 
to flesh out alternatives and Implications, and to Identify the Intersections of ambi- 
tious, realistic, meaningful, and sustainable solutions, based on Interests and compro- 
mise, rather than positions and claiming. Many of these key tensions are discernible 
within the structure and letter of the GN1, some largely resolved, others to be informed 
by future learning — an expectation built Into the GN1. While the participants brought 
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a wealth of knowledge and experience to the process, our collectively limited under- 
standing was also acknowledged and Is reflected In GNl's adaptive stance. 

Beyond Identifying common cause, reaching rough consensus for an operating 
approach was essential for the development of supportive strategies and tactics. These 
positions are apparent in the documents, both by their presence and their absence. 
As with the rest of the group decisions, they do not necessarily represent agreement, 
except in the collaborative context of the GN1. The consensus Included support for cor- 
porate engagement, the development of tools that accounted for the complexity of the 
situation, and the notion that we would actively develop understanding and responses 
over time. 

The group, for instance, took the perspective that on balance It was better to have 
companies operating responsibly even In potentially repressive markets, both in terms 
of services rendered and the leverage of positive engagement (around transparency and 
rule of law. In particular). Platforms that many consider self-indulgent or worse. Includ- 
ing TWltter (and Its 140-character "what are you doing?"), Facebook, and YouTube, 
have proven to be powerful platforms for activists. (Indeed, In the lead-up to the 20th 
anniversary of the Tiananmen Square protests, these and others were blocked in 
China. 25 ) The tools they provide to potentially advance social, economic, and political 
democracy are especially* Important In Information- and communlcatlons-poor set- 
tings, as artfully argued by my colleague Ethan Zuckerman. 2 * 

Just as we note the power of new technologies to support human rights. It Is equally 
essential to recognize the potential influence of company relationships and process on 
government behavior. After Microsoft removed Michael Anti's blog based on a less- 
than-formal request from Chinese law enforcement, for instance, the company Im- 
plemented new policies with respect to content takedowns. In addition to limiting 
removal to the local jurisdiction, Microsoft began requiring "legally binding notice 
from the government Indicating that the material violates local laws," as well as requir- 
ing assurance "that users know why that content was blocked, by notifying them that 
access has been limited due to a government restriction. 1/27 Google's launch of 
Google.cn, criticized by many for Its willingness to censor results, also Initiated the 
practice of appending a warning to Altered search results that notes the removal of cer- 
tain results according to local law, subsequently Instituted by Microsoft and Yahoo!, 
and later followed by Chinese services Including market-leader Baidu 2 * Moving for- 
ward, strong corporate process may Indeed be a great resource for supporting rule of 
law and fostering Increased transparency on free expression and privacy. 

Participants 

Global Network Initiative participants include ICT companies, nongovernmental 
organizations, Investors, and academics. The founding group of cotnpanles comprises 
Google, Microsoft, and Yahoo!. Academic participants In the GN1 are Annenberg School 
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for Communication (University of Southern California); Delrdre Mulligan. Berkeley 
School of Information (University of California); Berkman Center for Internet and Soci- 
ety (Harvard University); Rebecca MacKinnon. Journalism and Media Studies Centre 
(University of Hong Kong); and Research Center for Information Law (University of 
St. Gallen). Investors participating In the Gh'I are Boston Common Asset Management. 
Calvert Group, Domini Social Investments LLC, F&C Asset Management. KID Re- 
search & Analytics, lnc v and Trillium Asset Management. Nongovernmental organiza- 
tions participating In the GNI are Center for Democracy and Technology, Committee 
to Protect Journalists, Electronic Frontier Foundation, Human Rights First, Human 
Rights in China. Human Rights Watch, International Business Leaders Fomm, Inter- 
news. and World Press Freedom Committee. The United Nations Special Representa- 
tive to the Secretary General on business and human rights enjoys observer status. The 
drafting group also Included Amnesty’ International, Reporters Without Borders, France 
Telecom, Tellasonera, and Vodafone, none of whom continued to participate In the 
GNI after launch. 

Foundational Elements 

The structure and overall approach that emerged from the multiyear process are largely 
defined by three documents: the Principles, 2 '' the Implementation Guidelines, 30 and 
the Governance, Accountability, and Learning Framework, 31 which were released In 
October 2008 and will be supplemented by the Governance Charter, slated for final ap- 
proval in September 2009. At the most fundamental, aspirattonal. and stable level lie 
the Principles, which express overarching support for international standards centered 
on expression and privacy, and a commitment to act upon them. The associated 
Implementation Guidelines provide concrete guidance to companies regarding the re- 
alization of the Principles In practice and are Intended to reflect developing Institu- 
tional knowledge and respond to the challenges companies and users face. The 
Framework descnbes the Initial expectations regarding a supporting organization and 
the general design of the accountability and learning regime, which both ensures that 
companies are complying with the Principles and fosters learning within and across 
GNI participants. 

Principles 

While implementation will surely prove to be the greatest challenge, the audacious 
first task of the 20 -odd participating organizations — and the essential first step toward 
orienting the Initiative’s values and goals — was to articulate a common understanding 
of global principles for freedom of expression and privacy online. In doing so, the GNI 
drew heavily upon the Universal Declaration of Human Rights (UDHR), the Interna- 
tional Covenant on CMl and Political Rights (ICCPR), and the International Covenant 
on Economic. Social, and Cultural Rights (ICESCR), which together constitute the 
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International BlU of Human Rights.* 2 Within this broad frame, the document high- 
lights the underglrdlng role of government in respecting, protecting, and promoting 
human rights, along with the complementary responsibility — and opportunity — of 
1CT companies to do likewise. 

The Principles Include a preamble and sections on freedom of expression; privacy; 
responsible company decision making; multlstakeholder collaboration; and gover- 
nance, accountability, and transparency. The structure and tone balance lofty state- 
ments with more actionable commitments within each of these areas, acknowledging 
the elements of aspiration and implementation in the GN1. 

While the GN1 limits Its explicit focus to online expression and prtvacy, the Princi- 
ples recognize the interdependence of all human rights. They call out the particularly 
Important role of expression and privacy In realizing other rights and as guarantors of 
human dignity. On the more active side, GN1 participants commit to protect expres- 
sion and privacy’ rights both generally and In the face of laws and government 
demands that seek to undermine them. 

They also acknowledge "narrow" but potentially substantial exceptions to the rights 
outlined m the 1CCPR, including "actions necessary to preserve national security and 
public order, protect public health or morals, or safeguard the rights or reputations of 
others, " iJ related interpretations Issued by International human rights bodies, and the 
Johannesburg Principles on National Security, Freedom of Expression, and Access to 
Information. 

The sections that describe the key elements of the GNl's approach— Including re- 
sponsible company decision making; multlstakeholder collaboration; and governance, 
accountability, and transparency — Include reference to both higher-level vision and 
operational commitments. Companies agree to Integrate the Principles within their 
mission, decisions, and culture, and to that end, commit to senior-level Involvement, 
to anticipate risks and opportunities centered on expression and privacy, and to 
make best efforts to encourage partners and related businesses to also implement 
the Principles. In recognition of the novel challenges associated with 1CT, the Pnncl- 
ples point to the value of collaborative strategies that reach across sectors, and agree 
to engage Jointly to ads’ance expression and privacy. The final, and perhaps most 
notable, element is the commitment to public transparency and accountability in Im- 
plementation of the Principles — Including independent assessment and evaluation of 
compliance. 

Implementation Guidelines 

While accounting for the limitations of the GNl’s current incipient understanding of 
effective strategies and tactics, the Guidelines promise actionable steps for 1CT compa- 
nies that constitute compliance with the Principles and provide an Initial framework 
for collaboration among participants. Drawing upon collective expertence to date. 
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they aie designed as a stalling point, prepared to Incorporate lessons as the GN1 and Its 
participants discern them. 

The expectations cover roughly the same terrain as the Principles, but place "respon- 
sible company decision making" first, suggesting the overall frame within which the 
activities occur. Companies are expected to form Internal cross-functional teams to 
lead Implementation, to train employees (and the board) on approaches and proce- 
dures, to provide whistle-blowing mechanisms for employees, and to encourage busi- 
ness partners and others to adopt the Principles. 

With a priority placed on preventing Incidents, participants will undertake human 
rights Impact assessments to Identify circumstances when expression and privacy 
rights may be jeopardized or advanced (e.g., entering new markets; designing and 
Introducing new technologies, products, or services; selecting partners; responding 
to policy change) and develop steps to mitigate risks and to leverage opportunities. 
Companies will elaborate procedures and policies that govern these occurrences and 
the possible Issues that arise within them. 

The Guidelines state that authorities seeking to limit expression or privacy will be 
expected to do so In writing along with the legal basis for the restriction and the 
name of the requesting official, and that when required by governments to limit access 
to Information and Ideas, companies will interpret laws and requests narrowly - and 
communicate actions to users when legally permissible. When they are confronted 
with a practice that appears Inconsistent with domestic law and procedures or Interna- 
tional human rights laws and standards on expression or privacy, companies will chal- 
lenge It. Companies will document these requests and demands to permit tracking and 
review. 

Governance, Learning, and Accountability Framework 

Much of the value of the collective Is created by means of the activities described in the 
Framework, which Include the GNTs organizational structure and responsibilities, 
along with those of the participating companies and the Independent assessors. The 
Framework covers basic instltutlon-bulldlng responsibilities Including recruiting of 
new participants and outreach, fostering learning and collaboration on policy Issues, 
offering a communications channel for external parties and users, publishing an an- 
nual report, and creating an accountability mechanism. 

Independent monltortng, which begins with an orientation toward process and 
becomes Increasingly comprehensive over the GNTs first five years (ultimately Includ- 
ing Incident review), supports corporate accountability, remediation where necessary, 
development of good practice among participants, and continued evolution and re- 
finement of the GN1. The accountability process moves from capacity building (2009- 
2010), to Independent process review (201 1), and Independent process and case review 
(2012 and beyond). The phasing process was designed to accommodate the lack of 
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existing capacity to conduct monitoring and assessment In the ICT space, with the rec- 
ognition that assessment would have to parallel a gradual learning process, evolving 
alongside the GN1 and company Implementation. During the first phase, the board 
develops Independence and competence criteria for monitor selection as well as opera- 
tional guidance tor assessors, while the companies initiate Implementation of the Prin- 
ciples, and the organization focuses on learning and outreach. 

The second phase expects the companies to have fully Implemented the Principles 
and provided a detailed report of Its Internal processes to the organization. Based on 
this report, an assessor (or team, more likely) who meets the GNl’s criteria and Is 
selected by a company will review that company's processes In operation. In preparing 
their report, assessors draw upon other relevant materials from the company, except in 
cases of reasonable legal limits to disclosure, preservation of attomey-dlent privilege, 
or protection of trade secrets. 

In addition to facilitating the assessment process, the organization will review the ac- 
countability process with an eye to necessary Improvements, while also Informing the 
board of the results of individual assessments. In conjunction with GNI participants, 
the organization develops "dear, achievable guidelines" for compliance with the next 
phase of assessment based on experience to date. 

In the third phase , the board accredits a pool of eligible assessors. Identifying any con- 
cerns related to Independence for particular companies, and companies draw from this 
pool, with the board resolving any resulting concerns. With GNTs guidance, the asses- 
sor goes beyond process, examining actual incidents and company responses to gov- 
ernment requests, providing recommendations for Improvement and a detailed report 
to the GNI on the company's implementation of the Principles. Based on this and ac- 
counting for any changes the company has made In response to the findings, the 
board will determine whether the company meets GNI expectations and share that 
finding publicly. 

As In the previous phase, companies may choose to withhold certain Information 
based on legal limitation (as In the case of a national security letter), for the preserva- 
tion of attorney -client privilege, or to protect trade secrets, but will be expected to pro- 
vide as much information as possible as to any specific limitations on their responses. 
Withholding and the reasoning behind It will be reported and factored into the find- 
ings and may render the assessor unable to certify compliance. 

Criticisms and Challenges 

Lackluster Participation 

As varied as the group Is In many respects, the Global Network Initiative clearly lacks 
culturally and geographically diverse participation, and Is likewise limited In terms of 
the range of participating organizations within sectors, and companies In particular. 
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which Is surprising given the expectation of diverse corporate approaches to business 
and technology and the avoidance of techno-determlnlstlc solutions. For Instance, 
with the tremendous Influence of telecommunications companies and recent Issues to 
date (e.g., warrantless wiretaps or TOM-Skype surveillance), 4 * their absence represents 
an Important and missing piece of the puzzle. Their participation throughout the draft- 
ing process suggests that the model should be fairly well suited to their Interests, and 
yet they chose not to continue. Likewise, given the potential for explosive growth and 
expansion within the ICT space, the lack of small companies Is notable — and trou- 
bling. From a strategic perspective, their Inclusion Is Important to ensure diversity of 
perspective and practicability of approach, to say nothing of orienting them to human 
rights Issues at the stages when Integration with corporate functioning may be easier. 

These deficits do not necessarily reflect a lack of GNI commitment to Identifying 
additional partners and are likely a result of some combination of Its early stage of 
organizational development, a market reaction, and limited outreach capacity. In each 
case, however. GNI must ask what It needs to do to attract these groups, and also 
whether their absence has some larger significance. Legislators, shareholders, and other 
stakeholders should also consider whether they offer a sufficiently ample reward — and 
urgency — for companies to make the Investments necessary to participate In GNI. 
Given that neither non-Westem nor start-up companies took part In the drafting pro- 
cess (a path passively taken and reluctantly accepted by the group for expediency), It 
seems possible that some adaptation of the GNI may be necessary to facilitate their par- 
ticipation, especially those In markets less welcoming to the GNI. 

Accommodations could conceivably take many forms, whether some manner of on- 
boardlng or associate membership for those unable to Implement the principles Imme- 
diately, or a private form of participation, either to avoid government scrutiny or to 
simply focus on collective activities rather than make a public statement. While these 
types of arrangements might extend participation, they might also diminish the GNI 
brand and its value to current participants, and will require careful consideration. 

Accountability 

While Internet companies are new to accountability (perhaps reflecting their libertar- 
ian outlook, propensity for confidentiality, and relative corporate Immaturity), a rea- 
sonable, meaningful, and ambitious approach to accountability was widely viewed 
within GNI as essential to Its success and was a necessity for retaining the diverse coali- 
tion that comprises the GNI. Participants were deeply aware of Ruggle's observation, 
‘The Achilles heel of self-regulatory arrangements Is to date their underdeveloped ac- 
countability mechanisms. Company Initiatives Increasingly Include rudimentary forms 
of Internal and external reporting — But no universally — or even widely — accepted 
standards yet exist for these practices — Beyond certain multi-stakeholder systems, 
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like the Fair Labor Association, or third-party verification processes, such as Social Ac- 
countability 8000, social audits currently enjoy only limited credibility among external 
stakeholders."* 4 With the credibility of the GN1, and the Importance of accountability 
for learning and behavior change, the GN1 spent a great deal of energy examining di- 
verse voluntary Initiatives and industry practices, and developing its own regime. 

Taking inspiration from researchers*® and practitioners*' who have 1 denuded the 
limits to accountability and proposed a more Integrated model, the GN1 has sought 
not to be an organization that Is primarily based on accountability, but one that 
Integrates a strong regime alongside and In conjunction with other actlvldes. Only 
as reports and Information are generated, however, will we learn what this means in 
practice. 

Beyond the more common challenges of nonexistent metrics (although relevant 
ones are perhaps now on offer),* 8 various needs for confidentiality, and resistant corpo- 
rate culture, the process is made more complex by GNTs particular charactertsUcs and 
the unique attributes of the risks It seeks to mitigate — these Include the tension be- 
tween evaluating aspiration and Implementation, the scale and scope of the Internet, 
and the expeetadon that responsible companies will sometimes need to resist the law, 
rather than comply with It (Companies will choose to comply on some occasions, 
based on the context. Implications, and likelihood of success.) Moving forward, these 
Issues will remain In discussion, because the sohidons — whether best or only good 
practices — do not yet exist Thus, the accountability process cannot only compare be- 
havior with the model, but must go deeper to separate company tmplementaUon of 
the Principles from the outcome, because the former may have limited efficacy. 

As the structure that undergirds the GN1 by Informing learning and earning public 
trust, the accountability regime has rightly received a good deal of attention. Indeed, 
It Is complex and important enough that discussions are ongoing within the GN1 and 
will likely be a significant internal focus for years to come. There are specific critiques: 
the Electronic Fronder Foundation (EFF), Amnesty Intemadonal, and Reporters With- 
out Borders have publicly questioned whether a company will have undue influence 
on Its assessment teams and whether the companies will withhold potentially damag- 
ing lnformadon from assessors. The companies are uncomfortable, concerned with the 
prospect of allowing outsiders to access and share lndmate secrets, and eager to find 
trustworthy and competent assessors. There Is broad consensus that It will not be a 
"gotcha" process, wherein the assessors are trying to "catch” the company, but one In 
which they work together to ldendfy and address Issues over time to keep the company 
In compliance. The current approach seeks to achieve balance by having the board set 
Independence criteria for the assessors and the GNI assist In resolving concerns, likely’ 
along with an elaborate condactlng and compensation scheme, but only In Implemen- 
tation will fears be deemed justified or overblown. Indeed, at present, nobody has ever 
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done such assessments, and It Is not at all clear who might be both able and Interested 
In doing them. 

Ultimately, each ot these concerns (and others like them) must be addressed by the 
accountability regime, as Independent monitors report Initially on company process 
and then on actual Incidents, in evaluating a company's Implementation of the Princi- 
ples. This process will be complex, with the assessor needing to determine not only the 
more straightforward elements of compliance such as whether a training program Is In 
place, but also the difference between lackluster recruitment efforts and GNI flaws. The 
matters only get weightier, in the case of bad outcomes, discerning between Irrespon- 
sible company actions and good faith decisions, for Instance, If the actions following 
a human rights Impact assessment were sufficient or 111 considered. In light of the 
Impact. 

The constraint on the accountability platform Is that not only must It earn the 
public trust, but It must do so In a relatively’ lightweight, scalable, and affordable fash- 
ion that reinforces learning across the GNI. As participants, online activity, and gov- 
ernment interventions all increase, the regime will need to evolve with the Internet. If 
It Is unable or If It cannot be effective without being overly onerous, 1CT companies 
will not embrace the GNI. 

Publk Communication and Remedy 

As suggested by empirical experience and proposed in Ruggle's Protect. Respect, and 
Remedy Framework, offering transparent channels of communication and the poten- 
tial for remedy Is essential to addressing business and human rights concerns, and the 
GNI views them as essential for the purposes of Information gathering and for Its own 
credibility . A means for Individual users and other parties to reliably access and com- 
municate with the nascent GNI Is sdU In the design phase and likely to be pilot tested 
in 2009-2010. While all GNI participants recognize the need for channels for commu- 
nication, query, and complaint, the sheer number of Internet users Is Intimidating, and 
ts orders of magnitude different from the equivalent community In the labor or extrac- 
tive Industries, for Instance. The participatory expectations common to Internet cul- 
ture further Increase the likelihood of public Interaction with the GNI (noting the 
grass-roots creation of a GNI Face book group upon launch), suggesting the Incorpora- 
tion of a Web 2.0 approach that not only accepts complaints, but develops and shares 
Information, perhaps even In real-time. 

The GNI must be able to consider, review, utilize, or redirect large numbers of exter- 
nal submissions and do Its best to keep contributors Informed of the progress of their 
concerns. The GNI recognizes that It faces potential user submissions on any number 
of general topics, from critiques to requests for participation In GNI. Relevant distinc- 
tions must be made between those communications and submissions that concern 
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noncompllance with the Principles. Problems may arise when, for example, poor 
service, terms-of-servlce violations (often Interpreted as censorship), or the desire for 
an avenue of appeal Is perceived as noncompliance. 

According to the Governance Framework, the GNI complaints process should not be 
triggered until company channels are exhausted, and Is for extraordinary circum- 
stances. Complainants may also choose to seek redress through noncompany partici- 
pants, which may or may not have systems In place to address such Inquiries, 
potentially overloading them or yielding referrals to GNI without sufficient Investiga- 
tion. Given what are likely to be modest resources on the part of GNI, a robust system 
will be Imperative to maintain public trust and access to the system. The pilot program 
will develop a mechanism that Is a edible, practical, and effective, while anticipating 
the challenges posed by the potential scale of complaints and the diversity of end users 
and Issues. 

Learning and Understanding 

Limited knowledge of current practice among ICT companies and empirical under- 
standing of the problems they face related to online free expression and privacy, in 
conjunction with the ceaseless changes In business, user behavior, and government 
responses, mean that learning Is perhaps the greatest contribution that GNI can make 
for participants and other stakeholders. The GNI should leverage the tremendous col- 
lective resources and expertise of its participants, but will face the task of finding realis- 
tic ways to access and combine them — a task made difficult by legal concerns, secrecy. 
Intellectual property, and other competing agendas. From the development of human 
rights Impact assessments (a process long under way In the GNI) to the generation of 
useful data to Identify emerging Issues and trends, to the creation of relevant metrics to 
help track the state of expression and privacy online worldwide, the Initiative has the 
capacity to create novel outputs that can Inform company and user behavior, as well as 
government Intervention. While more attention has been paid to other areas of GNI, 
this zone holds the greatest potential to attract new participants and to change behav- 
ior In the long term. 

Scope and Specificity 

While the GNI has been cautiously welcomed, the participants In the process and 
others outside It have expressed a range of concerns. In many cases. It Is simply too 
early to tell whether these apprehensions will be borne out by experience, but they 
serve as valuable markers for GNI guidance and evaluation. While all are of con- 
sequence, some relate to the core functioning of the Initiative, while others relate to 
significant, but not necessarily essential, details. The EFF, for instance, has noted that 
the Principles lack a commitment by companies to develop technologies that support 
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privacy and circumvent censorship, a practice that seems to be a reasonable extension 
of the GNI commitments. 1 '' A host of other such Issues were left out for a variety 
of reasons, Including data retention, user-notification on data storage locations and 
risks, statistics on government requests, and circumvention methods, which have 
technological, legal, practical, and business Implications, and were deemed to be 
either outside GhYs scope or too Involved to address within Its initial phase. 

As the GNl's capacity grow with the hiring of a dedicated staff, the Inclusion of ad- 
ditional participants, and the development of robust systems, participants will need to 
revisit these Ideas In greater depth. For those that remain outside Its purview, the hope 
Is that the GNI will be able to foster cross-fertilization among a variety of different 
forums, Including governments, advocacy groups, and international organizations. 
Can EFF’s Ideas on technology tools, for instance, be taken up In a joint technology 
development group? 

Of more cross-art ting concern, Amnesty International and Reporters Without 
Borders 40 point to language that they consider too open to interpretation. Including 
companies' commitment to using "best efforts" to foster GNI adoption among joint 
ventures, subsidiaries, and the like, as well as the discretion afforded to companies to 
determine when and how to resist government requests. Responsible company behav- 
ior In each Is of the utmost Importance, and while the language was Intended to be re- 
alistic and to provide companies with a degree of flexibility (eg., not all suppliers are 
relevant, oral requests may be acceptable In cases of Imminent harm, fighting every’ 
single government request Is Impractical), It most certainly also provides them with 
an escape clause, which underscores the role of the accountability process. 

Criteria for Success 

In order to accomplish the goals of the GNI, there are broad traits present In the 
design phase that should be retained over time. As the structure, process, and organiza- 
tion develop and respond to existing and emerging concerns, It will be essential to 
periodically revisit the values that inform the overall approach, especially with respect 
to Its efficacy, adaptability, scalability, transparency, legitimacy, neutrality, and 
sustainability. 

Efficacy Does the operationalization of the Principles recognize that expecting com- 
panies to resist government requires balance with respect for the legitimate aspects of 
government power over expression and privacy, Including a spectrum of national stan- 
dards? Will the accountability regime provide the correct Incentives, encouraging com- 
pany attention to specifics as well as larger and more asplratlonal activities? 
Adaptability With the entire landscape shifting continually, presenting new chal- 
lenges, opportunities, modes, and pressures, can the GNI create sufficient process to 
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meet current needs while maintaining Its flexibility to adapt and Improve alongside, or 
ahead of, the path ahead? Will the organization be caught responding to the 
new terrain with the methods for traversing that of the past decade, whether In ac- 
countability, learning, or public remedy? Can the GN1 adjust Its vision and mode as 
the participants — and their needs and perspectives — change? 

Scalability Does the approach scale alongside Increasing users and uses of 1CT, as well 
as the apparently concomitant increase in government affronts on expression and pri- 
vacy? How will the GN1 attract greater participation? How will the GNI's internal sys- 
tems represent the interests of the cunent 1.6 billion Internet users** and 4 billion 
mobile subscribers, «* and what will happen as those numbers grow? 

Transparency With an accurate understanding of the Issues essential for effective in- 
tervention on the part of the policymakers, advocacy organizations, business, and ulti- 
mately users (who decide what. If anything, they do online), will the GNI be capable of 
widely and faithfully conveying what Is actually happening? Will statements be sup- 
ported by data and directly Informed by company experience, rather than by anecdote, 
to promote understanding of systemic Issues and trends, contnbutlng to a chain of ac- 
countability and building understanding of new/potential pressure points as they 
emerge over time? 

Legitimacy Will the organization earn and keep the public’s trust? Are the account- 
ability processes perceived as both robust and reasonable, are there open channels for 
communications with the public. Is the Information shared with the public adequate? 
How does the GNI distinguish between the progress of the participants and Its own 
advances? How will these developments be evaluated? 

Neutrality Can the GNI become a tmly global standard, and not be viewed as being 
unduly influenced or dominated by the Interests of any nation, culture, or organiza- 
tion? Will its interventions or recommendations take Into account cultural nuance 
and local knowledge while continuing to uphold high International standards for hu- 
man rights? 

Sustainability Will the GNI and Its participants be able to generate the collective and 
Internal resources necessary for implementation and ongoing effectiveness? Will the 
organization be able to sustain the level of activity to which It has committed, or 
come up with creative ways that involve others in this work? 

Conclusion 

The story has not yet ended for the GNI or for Yahoo!. In December 2008, the Viet- 
namese government passed a law limiting online political speech and requiring online 
service providers to report violators, publicly stating Its expectations that Google and 
Yahoo! would contribute to a ’'healthy" Internet.* 5 How the situation develops— 



Colin M. Mad ay 


104 


whether government rests on rhetoric or actually seeks to enforce the new law, and 
how Yahoo! (and Google and non-GNI companies) responds — will Inform company 
and government strategy In Vietnam 44 and suggest the capacity of a self-governing Ini- 
tiative to require Its participants to not comply with the law when It conflicts with 
International human ttghts standards. 

As the GN1 moves ahead, observers will rightly ask what to expect — how we will 
know we have begun to Impact company behavior, government approaches, and user 
conduct online. Perhaps most importantly, they will ask what success will look like. 
These are hard questions. The GN1 was designed by a relatively small group with lim- 
ited resources, and the fact that It has come this far in a relatively short period of time 
Is objectively Impressive, but only when It Is tested in the marketplace will the appro- 
priateness of Its design begin to become apparent. Initially’, beyond reporting on basic 
commitment, output measures will help, such as growth In participants, creation of 
data and other learning resources, and policy engagement- Individual examples may 
also be helpful, for Instance, If GN1 helps a company address a tough decision or antic- 
ipate an emerging issue. 

Over time, we must expect positive outcomes, but with so many factors affecting the 
protection and advancement of free expression and privacy — and the GN1 — the causes 
of success and failure will not always be dear. Measuring Impact Is difficult in part be- 
cause the GN1 will be successful precisely when It avoids problems and goes unnoticed. 
Some useful proxies may be increased public awareness of the Issues, enlightened gov- 
ernment action, and Ideally metrics for takedowns and information requests that sug- 
gest a combination of waning government abuse and avoidance of Increased corporate 
restrictions. 

We are caught between the proverbial rock and a hard place, particularly as society 
undergoes the complicated process of Integrating, adapting, and shaping the role of 
new media. As It becomes Integrated Into our lives and livelihoods, the potential for 
both good and harm continues to grow, along with the responsibility of the businesses 
providing these services. Thus far, this adoption of the Internet and related technolo- 
gies has brought not only new challenges, but new tools for addressing them. Rather 
than resisting change, we need to consider how to guide It using a combination of 
past experience and Innovative approaches. 

While there are other broad changes and trends with much deeper soda), economic, 
and political Importance, the combination of reach, speed, and accessibility of new 
media render It a poignant — and challenging — frontier for an Increasingly globalized 
world. The particular contours may well be indicative of other pressing (or emerging) 
challenges, suggesting that our approach to addressing these challenges may also hold 
broader lessons for new kinds of Institutions and new approaches to policymaking at 
the nexus of sectors and nations, economics and politics, culture and Identity. 
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Part II Country Profiles and Regional Overviews 




Introduction to the Country Profiles 


The country profiles that follow offer a synopsis of the findings and conclusions of 
OpenNet Initialise (ONI) research Into the factors Influencing specific countries' deci- 
sions to filter or abstain from filtenng the Internet, as well as the Impact, relevance, 
and efficacy of technical filtering In a broader context of Internet censorship. 

These profiles cover the countries where ONI conducted technical testing and analy- 
sis from 2007 to 2008. Countries selected for ln-depth analysis are those In which It Is 
believed that there Is the most to leam about the extent and processes of Internet filter- 
ing. 

Each country profile Includes the summary results of the empirical testing for filter- 
ing. "Hie technical filtering data alone, however, do not amount to a complete picture 
of Internet censorship and content regulation. A wide range of policies relating to me- 
dia, speech, and expression also act to restrict expression on the Internet and online 
community formation. Legal and regulatory frameworks, including Internet law, the 
state of Internet access and Infrastructure, the level of economic development, and 
the quality’ of governance institutions are central to determining which countries re- 
sort to filtering and how they choose to Implement Internet content controls. A brief 
study of each of these factors Is Included in each of the country profiles. Together, 
these sections are Intended to otter a concise, accurate, and unbiased view of Internet 
filtenng and content regulation. 

Each country is given a score on a five-point scale presented In the "Results at a 
Glance" table. The scores reflect the observed level of filtenng in each of four themes: 

1. Political: This category Is focused prlmanly on Web sites that express views in oppo- 
sition to those of the current government. Content more broadly related to human 
Hghts, freedom of expression, minonty nghts, and religious movements Is also consid- 
ered here. 

2. Social: Tills group covers matenal related to sexuality, gambling, and Illegal drugs 
and alcohol, as well as other topics that may be socially sensitive or perceived as 
offensive. 
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3. Conflict iirnl security: Content related to armed conflicts, border disputes, separatist 
movements, and militant groups Is Included In this category*. 

4. Internet tools : Web sites that proside e-mail, Internet hosting, search, translation, 
Voice over Internet Protocol (VoIP) telephone service, and circumvention methods 
are grouped In this category. 

Hie relative magnitude of Altering for each of the four themes Is defined as follows: 

1. Penns he filtering Is characterized by both Its depth — a blocking regime that blocks a 
large portion of the targeted content in a given category — and Its breadth — a blocking 
regime that Includes filtering In several categories In a given theme. 

2. Substantial filtering has either depth or breadth: either a number of categories are 
subject to a medium level of filtertng, or a low level of filtering Is carried out across 
many categories. 

3. Selective filtering is narrowly targeted filtenng that blocks a small number of specific 
sites across a few categories or filtering that targets a single category or Issue. 

4. Suspected filtering Is Indicated when connectivity abnormalities are present that sug- 
gest the presence of filtering, although diagnostic work was unable to confirm conclu- 
sively that Inaccessible Web sites are the result of deliberate tampering. 

5. No evidence of filtenng: ONI testing did not uncover any evidence of Web sites being 
blocked. 

Hie "Results at a Glance" table also Includes a measure (low, medium, or high) of the 
observed transparency and consistency of blocking patterns. Hie transparency score 
given to each country Is a qualitative measure based on the level at which the country 
openly engages In filtenng. In cases where filtenng takes place without open acknowl- 
edgment, or where the practice of filtenng Is actively disguised to appear as network 
errors, the transparency score Is low. In assigning the transparency score, we have also 
considered the presence of provisions to appeal lnappropnate blocking or report 
Instances of it Consistency measures the variation In filtenng within a country across 
different ISPs— In some cases the availability of specific Web pages differs significantly 
depending on the ISP one uses to connect to the Internet. 

An aggregate view of the level of development for each country Is represented by the 
results of the first four indexes presented In the "Key Indicators” table: gross domestic 
product per capita, life expectancy, literacy rates, and the human development Index. 

Hie first three measures are drawn from the World Bank development Indicators 
data set. Hie GDP measure, which captures the ability to purchase a standard basket 
of consumer goods, Is expressed In constant 2005 International dollars. Life expectancy 
can be seen as a proxy for general health, and literacy an imperfect but reasonable In- 
dication of the quality of education. The human development Index Is constructed by 
the United Nations Development Program to reflect overall human well-being. 
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Governance Is widely recognized to be a key determinant of economic success and 
human welfare. We therefore also Include two measures of governance: rule of law 
and voice and accountability. These Indexes are defined and compiled by researchers 
at the World Bank using an aggregation of the best available data. The authors of the 
Indexes define them In the following way: 

Ride of law Includes several Indicators that measure the extent to which agents have 
confidence in and abide by the rules of society. These Include perceptions of the inci- 
dence of crime, the effectiveness and predictability of the |udlclary, and the enforce- 
ability of contracts. 

Voice and accountability Includes a number of Indicators measuring various aspects 
of the political process, civil liberties, and political and human rights, measuring 
the extent to which citizens of a country are able to participate in the selection of 
governments. 

An aggregate Mew of the state of democracy Is provided by the Economist Intel- 
ligence Unit's Index of democracy. This Index Is based on five categories: electoral 
process and pluralism; civil liberties; the functioning of government; political partici- 
pation; and political culture. The 16S states included In this Index are placed within 
one of four regime type categories; full democracies, flawed democracies, hybrid 
regimes, and authoritarian regimes. 

We also include two measures of Internet accessibility provided by the International 
Telecommunication Union: the digital opportunity Index (DOl) and Internet users as 
a percentage of the population. The DOI Is based on 11 core Information and com- 
munication technology (ICT) indicators that are agreed upon by the International 
Telecommunication Union's Partnership on Measuring ICT for Development. These 
are grouped in three clusters by type: opportunity, Infrastructure, and utilization. The 
DOl therefore captures the overall potential for and context of Internet availability* 
rather than usage alone. The measure of Internet access, the Internet penetration 
rate. Is simply the percentage of the population Identified as active Internet users. 
Additional Internet penetration rate Indicators are drawn from the Mlnlwatts Mar- 
keting Group, which compiles the latest Internet usage statistics from a range of 
reputable international and local sources Including the ITU, Gfk Group, and Nielson 
Online. 

Internet regulation and filtering practices are often dynamic processes, subject to 
frequent change, though we expect that the political climate and the aggregate Mew 
of the Issues reflected In these profiles will change more slowly than the specific in- 
stances of filtering. As the context for content regulation and the practice of Internet 
filtering evolve, updates will be made to the country profiles, and new countries may 
be added- These updates will be available at http://www.opennet.net. 
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Sources for Key Indicators 

GDP per capita. PPP (constant 2005 international dollars) 

World Bank; "Work! Development Indicators Online/' 20)9. http:tfweb.worldbank.otgAVWrTy 
EXTERNAL/DATAST ATI STlCS/0,.contentX4DK:20398986~menuPK:64 133 163~pagePK:64 133150 
~ptPK:64 133 1 75~theSiteFK:2394 19,00.htm]. 

Life expectancy at birth (years) 

World Bank, "Key Development Data and Statistics/' 2009, http:^vrw%-.worldlxiiik.org/daW 
countrydata/cxnmtrydata.html. 


Literacy rate 


World Bank, "Key Development Data axW Statistics/' 2009, http:tfVww.worldlxuik.org/data/ 
countrydata/cxnuitry data.html. 

Human development index (value and ranking) 

United Nations Development Program (UNDP). "2008 Statistical Update”, 2008, http:tfhdr.uxid* 
p.org/en/. 

Rule of law 

World Bank. 'Worldwide Governance Indicators 1996-2008”, 2009, http://info.HHxWbank.org/ 
gcveniance/H'gi/index.asp. 


Vokc and accountability 


World Bank. "Worldwide Governance Indicators 1996-2008”, 2009, http://knfo.HHxWbank.org/ 
goveniaiice/H'gi/index.asp. 

Democracy index 

Economist Intelligence Unit. "Economist Intelligence Unit Democracy Index, 2008”, 2008, httpetf 
wH*w.ei\LCom/site_info.asp?info_name-so\'ereign_ratings. 


Digital opportunity index (value and ranking) 

International Telecommunication Union (MU), "World Information Society Report. 2007: Be- 
yond WSIS", 2007, http:tfHWW.itu.ixit/ osg/ spu/ 'publicat ions / worl dir if or matio risocie ty/2007/. 
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Internet penetration 

International Telecommunication Union (ITU), "Internet Indicators: Subscribers. Users, and 
Broadband Subscribers." 2006, httpr.O’ivvm-itu.lnUnU D/icteye/Repoiting/SlHyvsReportFrame.aspx 
?ReportNaroewAV’n/InformationTedinologyPubbc&RP_intYear-2008&RP_intLanguageID- 1 . 

Milliwatts Marketing Group, "Internet World Statistics." 2009, http://www.mtemetworklstat5 




Commonwealth of Independent States 




CIS Overview 



Over the past four years the scale and reach of the Internet In the Commonwealth of 
Independent States (CIS) has continued to expand. As It has grown, a vibrant cyber cul- 
ture has emerged, strengthened by a Soviet legacy, which has bequeathed the region 
with Russian as a lingua franca and common cultural and historical reference that con- 
tinues to bridge the national boundaries between the former Soviet states. 

Commensurate with Its growth, the Internet domain In the CIS has emerged as a dy- 
namic and complex environment In which states, cyber criminals, nongovernmental 
organizations, businesses, and individuals actively collude and compete. The region Is 
currently driving the evolution of next-generation Information controls encompassing 
legal regulation as well as Innovative tactics such as the alleged use of third-party actors 
to generate crowd sourced denial of service attacks and other offensive means. These 
control tactics shape the information space through competition, rather than tradi- 
tional filtering. There are also Indications that these tactics and techniques are now be- 
ing adopted in other regions. 

Consequently, since the last OpenNet Initiative (ONI) volume. Access Denied, the CIS 
region has provided a number of new developments In Information controls. The region 
witnessed two cyberwars. The first was a campaign by pro-Russian (and allegedly state- 
sponsored) hackers, which paralyzed the Estonian Internet In May 2007. The second 
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was a similar campaign (also allegedly organized by nationalist pro-government Rus- 
sian hackers) that occurred at the same time as major combat operations In Georgia 
(August 2008). The latter campaign targeting Georgian online media and government 
Web sites led Georgian authorities to filter access to Russian Internet sites (allegedly as 
a means of self-defense against Russian cyber propaganda) and resulted In an Informa- 
tion vacuum In Tbilisi during the critical days where It was unclear whether Russian 
troops would stop their advance into Georgia. 

Next-generation Internet controls have also been utilized during elections. For exam- 
ple, reports Indicate that in Belarus, Kyrgyzstan and (allegedly) Russia' pro-government 
forces selectively used denlal-of-servlce (DoS) attacks during elections in order to silence 
opposition and Independent media. During periods of heightened political tensions, 
countries such as Armenia and Belarus have employed legal and technical means to 
seize control of domain space, or shut down access to the Internet. 

In the last 20 years, rapid changes have been a constant phenomenon In the CIS, but 
Western-sponsored democratic reforms have only been partially successful. In recent 
years a new authoritarianism has emerged In the region, with many governments seek- 
ing to reassert control over the national information sphere. 

At the same time, many countries of the CIS have adopted national development 
strategies that emphasize Information technology (IT) as a means for economic 
growth, with some even declaring their Intent to become regional "t T powerhouses." 
However, as a consequence of the color revolutions in the early to mld-2000s in 
Ukraine, Georgia, and Kyrgyzstan, many CIS states — particularly* those with au- 
thoritarian tendencies — are aware of the consequences that this "technological 
empowerment" may prompt. Many In the region now see the Internet and other 
communications channels in national strategic terms, and these countries have in- 
creasingly turned to secudty-based arguments — such as the need to secure "national 
Informational space" — to justify regulation of the sector. Consequently, the region is 
a leader In the development of next-generation Information controls. 

In 2007 and 2008, ONI tested for the presence of filtering In all CIS countries: Arme- 
nia. Azerbaijan, Belarus, Georgia, Kazakhstan, Kyrgyzstan, Moldova, Russia, Tajikistan, 
Turkmenistan, Ukraine, and Uzbekistan. 

The results of ONI testing yield significant patterns of first-generation filtering In 
Uzbekistan and Turkmenistan. Uzbekistan pursued pervasive filtering of the kind 
found In China and Iran. Turkmenistan's Internet Is even more tightly restricted, with 
access available only through a single government provider. In other countries, strong 
evidence of second- and third-generation controls Is emerging, with filtering occurring 
at strategic junctures, as well as In Indirect and less detectable ways often supported by 
restrictive legal regimes. In almost all countries, filtering also occurred on corporate 
networks (such as educational and research networks), where accepted usage policies 
(AUPs) dictated that Inappropnate content was not permitted; or in "edge locations" 
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such as Internet cafe, where the reasons lor filtering were more benign (conserving 
bandwidth) or left to the discretion of ihe Internet cafe owners themselves. 

The ONI methodology makes it difficult to detect second- or thud-generation tech- 
niques, which often Involve DoS attacks, or other means of eliminating or silencing 
Web sites that do not rely on filtering. In these cases, which include Kyrgyzstan, 
Armenia, Belarus, Estonia, and the Kusslan-Georglan war, the ONI relied on a network 
of researchers within these countries to run ad hoc and one-time tests, as well as to 
Investigate specific instances where DoS attacks, or other forms of technical manipula- 
tion, were used to silence Web sites or other Internet-based communication tools. 

The OS Region: Ethnocultural Diversity and a Shared Historical Space 

The CIS — a loose and largely Ineffectual political organization — occupies most of the 
territory that once constituted the Union of Soviet Socialist Republics (USSR). Strad- 
dling a swath of Eurasia from the Pacific to the doorsteps of Europe, the Arctic Circle, 
and the deserts of Central Asia, this vast land mass encompasses 12 time zones, some 
350 million people, and more than 100 distinct ethnic groups Including all the world’s 
ma(or religions and at least three ma)or linguistic communities (Slavic, TUrklc, Farsi). 
The CIS remains dominated by the Russian Federation, which maintains Its influence 
through economic, political, and defense ties, as well as popular culture that continues 
to predominate within the region. Russia Is currently a major energy supplier to many 
CIS states, giving It considerable political muscle In the region. 

The region's shared political heritage, together with the fact that many present-day 
leaders In the CIS governments and economies were also In positions of authority 
during the Soviet era, means that much formal and Informal coordination continues 
to exist among and between member states, despite political differences that are at 
times difficult. On some occasions, this coordination has led to the adoption of similar 
approaches In legal and political development. Furthermore, the loose. Informal coor- 
dination among officials Is helped along by the fact that most countries share the same 
legal tradition, as well as similar organizational characteristics of the security forces and 
the distribution of powers among the judicial, executive, and legislative branches of 
government. 

Notwithstanding their shared past, over the past few years CIS governments have 
not hesitated to challenge Russia's hegemony by seeking other political and military 
alliances with Western Europe and the United States. At an accelerating pace, gov- 
ernments are looking beyond their traditional partners lo discover new International 
trade and economic routes. This approach even more distinctively defines the CIS as a 
quickly changing region: although CIS countries share a common cultural heritage, 
they are Increasingly taking diverging paths In their political and economic develop- 
ment, mainly because of foreign Influence and an emerging rivalry among them. 
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Access to the Internet In the CIS 

Internet penetration rates In the CIS region have experienced significant growth over 
the last couple of years, though the figures are still low In comparison to Europe and 
other regions. Internet access Is mainly clustered In urban areas and spread among 
youth. In contrast to gender penetration rates In most Aslan and Middle East and 
North African (MENA) countries, the percentage of male and female users In the CIS 
is almost the same, perhaps reflecting the "equality’' between sexes prevailing in the 
Soviet era. 2 Income levels In the CIS are generally low, while the costs of computers 
and connectivity are relatively high. Overall, Internet penetration In Russia lags behind 
that of other Industrialized nations (27 percent as of 2008)* and Is relatively high only 
In large cities (particularly Moscow and St. Petersburg). Among the CIS countries, 
Belarus has the highest Internet penetration rate, 29 percent for 2008. The popularity 
of the Internet in this country might be a response, at least In part, to the fact that 
Belarus Is one of the countries with the toughest governmental control In the CIS. As 
a result, the Internet remains one of the few media where citizens can exchange view- 
points and obtain uncensored information from International sources. 

Ukraine (with a 14.6 percent penetration rate) and Moldova (16.2 percent) have 
almost doubled their Internet access rates over the last couple of years. The states of 
Central Asia have also shown considerable growth In their Internet penetration rates: 
Kyrgyzstan (13.8 percent) has become a leader In this subgroup partly as a result of 
the state’s policies aiming at further market liberalization. Kazakhstan (12.3 percent) 
follows closely. Uzbekistan and Tajikistan have measured a swift Increase in the 
number of Internet users, with Uzbekistan at 8.8 percent and Tajikistan at 6.6 percent 
In 2008. Turkmenistan measures very low Internet penetration (1.4 percent), since 
until recently the Internet was a privilege only for elites. As of 2008 Azerbaijan had an 
Internet penetration rate of 18.3 percent, while Armenia and Georgia had penetration 
rates of S.8 percent and 7.8 percent, respectively. 4 

Official figures. In most cases, are far from being accurate. Depending on the country, 
local sources show either higher Internet penetration rates or considerably lower (In 
Kyrgyzstan local sources show that only 7 percent of the population had access at 
the end of 2008). 5 Even among International organizations the estimates are strikingly 
different: the United Nations (UN) e-Govaiiment Survey* states that in Kyrgyzstan. 
Internet penetration was no more than 5.6 percent for 2008, while the International 
Telecommunications Union (ITU) provides figures almost three times higher for 2008. 
These discrepancies are partly due to difficulties In calculating the number of users In 
countries where most people share Internet access through their places of work or 
study (for example, workplaces account for over 51 percent of all users In Kyrgyzstan 7 
and Belarus), as well as via Internet cafe, whose use Is very high In some countries 
(around 30 percent for Uzbekistan). This shared use, and in some cases the creative 
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use of networks such as Fidonet to route traffic to and from the Internet, may result 
In considerable underestimation of the actual number of users. 4 In addition, some 
Internet service providers (ISPs) do not reveal the real number of customers In order 
to conceal their proceeds. 

The Role of New Technology In the CIS 

The CIS region showcases examples of just how profoundly the Internet can affect 
social and political life. The Importance of the Internet to political and social life Is af- 
fected by the general openness of the media in the country. In Uzbekistan and Belarus, 
for example, where the government controls the media and stifles political opposition, 
the relevance of the Internet to political and social life is very high. In Tajikistan rele- 
vance remains low, while In Turkmenistan the Internet Is still reined In by the govern- 
ment to such an extent that simple access remains a problem, leasing little room for 
the Internet to significantly influence political and social life. 

The Internet constitutes an effective political tool in the hands of the people. During 
sensitive times, when governments attempt a tough crackdown on the media, the 
Internet remains the only available source of Information, a fact that determines its 
high Impact on shaping groups and affecting behavior. At times, when faced with a 
"state of emergency," governments attempt to shut down online news sources In order 
to limit the spread of oppositional materials. For example. In Armenia the president 
Imposed severe restrictions on the media and the Internet after the presidential elec- 
tions in February 2008. This situation by Itself triggered waves of discontented reactions 
by bloggers and online media journalists, who were among the few who reported on 
these events outside the country. Their condemnation of the Imposed restrictions was 
quickly taken on, spread on the Internet, and hence multiplied the effect of the gov- 
ernment's critics both Inside and outside the country. 

The CIS demonstrates that information and communication technology (1CT) Is not 
always deterred by low Incomes, and Its significance to political life grows quickly 
when people want to voice their opinion. Such examples were the Ukrainian Orange 
Revolution (November 2004).'* the Rose Revolution In Georgia (2003), and recently 
the so-called Twitter Revolution In Moldova (April 2009). Even though Moldova Is 
one of the poorest countries in Europe, Moldovans demonstrated that they are pre- 
pared to resort to the latest technologies when needed to unite and voice their discon- 
tent. Communicating by means of Twitter through the General Packet Radio Service 
(GPRS) on their mobile telephones, Moldovans revealed the growing role of social 
media In Eastern Europe as a political tool. Surpnslngly, poor countries show a growing 
appetite for adopting new technology and catching up with the West. Turkmenistan 
Is another example of how quickly technology can reach people when It Is offered 
at competitive prices. For years operating only with one state ISP and limited access. 
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the country has been showing the lowest Internet penetration rate In the region. 
When a license for a private operator was granted, MTS began offering new services 
(GPRS/EDGE for the country). More than SOO.OOO people joined for about half a year, 10 
which Is 9-10 percent of the population. Citizens In CIS countries have expressed a 
growing enthusiasm for the Internet and 3G mobile services and have manifested their 
"e-readlness" in politically sensitive times. This trend raises the concern that govern- 
ments already accustomed to controlling media and communications may wish to 
develop means to close down free speech outlets any time they feel threatened. 

Government officials recognize the power of the Internet to affect political and social 
life, and have actively moved to compete for Influence in the space. In Moldova and 
Azerbaijan, for example, ministers and heads of agencies are now required to main- 
tain Web sites and blogs, and regularly give Interviews to student organizations, broad- 
casting them over YouTUbe or 1PTV as an effective means to reach out to young people. 
This Is a relatively new development that demonstrates an awareness among the po- 
litical elites that the Internet Is an Important channel for exerting Influence over 
domestic audiences. 

Moreover, a key aspect of the Internet's political significance remains understudied: 
as a person-to-person back channel for communications and social networking essential 
to dally life In Russia, where personal contacts and an "Informal economy of favors" re- 
main keys to "getting ahead." 11 In this sense. It Is Interesting to note that in Uzbekistan 
Information obtained from the Internet Is accepted as being more accurate than that 
secured from other sources, reflecting the culture's strong social networking aspect. 

Legal and Regulatory Mechanisms to Control the Internet In the CIS 

In recent years, the trend In all CIS states has been toward greater regulation of the 
national Information space, which Includes the Internet. While the constitutions of 
(nearly) all countries enshnne the principles of freedom of Information and freedom 
of expression, the authorities have taken various legal steps to regulate and shape par- 
ticipation In this space. Such measures are described In the following subsections. 

Restrictions on Access to or Dissemination of Certain Types of Content 

Restriction of Internet Content under State General Laws Freedom of expression Is 
an Important feature In almost all constitutions In the CIS. But Increasingly, laws, 
decrees, and administrative orders are used to limit the extent of these freedoms, and 
In general the tendency Is toward restrictions which contradict in spirit. If not in law, 
the nghts enshrined In constitutional documents. For example, freedom of Information 
can be restricted when necessary to protect moral values, public order, national secu- 
rity, state secrets, and other privileged data (Belarus, Russia, and Tajikistan). Uzbekistan 
goes even further to limit freedom of Information to safeguard national, spintual, cul- 
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tural, and scientific potential. No specific laws explain satisfactorily the meaning be- 
hind such notions as "public order." By referring to broadly defined values, the text ap- 
parently leaves leeway for authorities to prosecute users for any type of content that It 
considers "illegal." 

In some cases, government officials have demanded that the ISPs — formally or 
Informally — temporarily suspend sites detrimental to "public order" (Tajikistan). 
Some of these sites remain suspended for an indefinite period of time (Kazakhstan). 

Restrictions Envisioned In the Internet Service Agreements between the ISPs and their 
Customers Meant to be an open medium encouraging freedom of speech and expres- 
sion, the Internet has Increasingly become a target for strict regulation. Governments 
are frequently expanding the scope of content that is not to be allowed on the Inter- 
net. At times, ISPs are setting strict rules for the users, which. If not complied with, 
can lead to the termination of service agreements. Some providers set broad restric- 
tive rules as preconditions In the contract with the user (e.g., TlukmenTelecom, 
Kazakhstan); others may decide to limit access If they subsequently decide that the 
accessed content Is "Inappropriate" (Uzbekistan). Such "Inappropriate" content Is not 
strictly defined and open to broad Interpretations and arbitrary decisions by the ISPs, 
or state authorities. 

In some cases, ISPs are part of the state administration and are directly instructed by 
the government to Introduce such restrictive legal provisions in the customer agree- 
ment. One such example Is TurkmenTelecom, which cautions Its users that Internet Is 
not a "place for unconsidered behavior" and provides an extensive list of types of con- 
tent that users are forbidden to access or disseminate online, such as violent behavior, 
foul language, and defamatory remarks, among others. 12 On other occasions, ISPs have 
been directly Instructed by the state to envision restrictions to accessing online con- 
tent. In Kazakhstan, for example, ISPs prohibit their customers from disseminating 
pornographic, extremist, or terrorist materials or "any other information not In accor- 
dance with the country's laws" over the Internet. 1 * Such vague categorization opens 
the door for authorities to prosecute online journalists and bloggers on a broad range 
of Issues. Such uncertainty contnbutes to growing self-censorship. 

In a third category of cases, ISPs may not have been Instructed by authorities to 
apply measures against certain online behavior or types of content posted on the Inter- 
net, but based on the repressive climate encouraging self-censorship, these ISPs are 
attempting to anticipate what the authorities may find objectionable and act accord- 
ingly In order to avoid losing their license, as Is the case In Russia. 

Registration Requirements for Internet Web Sites 

CIS states are Increasingly requiring Web sites to register as mass media, making them 
sub|ect to national legislation governing content, defamation, and copyright, criminal 
offense to the state and officials, and others. Officials increasingly speak In favor of 
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registering all Information outlets, including the Internet, as a means to exert control 
over the quality and character of media content (e.g., Belarus, Russia, Kazakhstan). 
Requiring such registration for Web sites would have a chilling effect on anyone seek- 
ing to publish on the Internet. They would become vulnerable to criminal or civil 
liability and would be an easy target for government prosecution, especially as the 
laws describing "undeslred content" weigh In favor of the state. Moreover, failure to 
register a Web site creates a valid legal pretext under which such content can be 
deemed ‘'Illegal" by state authorities, thus providing a legal case for filtering the con- 
tent or suspending the licenses of the ISPs. Posting "Illegal" content also carries the 
risk of prosecution for the site owner or the user who posted such material, contribu- 
ting to a climate of self-censorship, and generally dissuading anyone from posting con- 
tent on the Internet. 

In Uzbekistan, the law on mass media that holds journalists and editors responsible 
for the "veracity" of published materials has already brought about self-censorship 
among journalists and bloggers. The "objectivity" test Is applied also In Belarus, where 
Independent journalists, editors, and opposition leaders are frequently subject to arbi- 
trary prosecution and arrest. In Russia, online forums have been added to the defini- 
tion of mass media, setting a precedent for prosecution of social networking sites. 

Defamatory Provisions 

Defamation laws have been used successfully to prosecute civil and criminal cases 
against Web site owners for allegedly hosting "defamatory" content. In Belarus, for ex- 
ample, the definition of defamation and slander laws has been expanded to selectively 
prosecute and deter bloggers, opposition leaders, and Independent media from posting 
material critical of the government or specific government officials. On numerous 
occasions, Russian officials have spoken of the need to Introduce specific legal measures 
that would allow them to prosecute online participants for defamation of members 
of the federal or regional state administration. In Russia, Uzbekistan, Kazakhstan, and 
Belarus, there are numerous cases of online journalists and bloggers being charged for 
defamation and subsequently jailed. 

National Security Concerns 

The need to develop ICT Is a national priority In many CIS countries. Almost all CIS 
governments have adopted national ICT strategies that set ambitious targets for the 
development of the Internet In government, education, and Industry. At the same 
time, most countries have also adopted national information security doctrines, which, 
on one hand, underline their understanding of the need to encourage development of 
the Information sphere and, on the other, document their growing security concerns 
with regard to the Internet. Russia remains a significant Influence In leading these ten- 
dencies within the region, and has been Increasingly proactive In exporting Its exper- 
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Use to other CIS Mates. Since late 2000, Russia’s "Doctrine of Information Security" has 
been adapted (in various forms and guises) as the basic precept defining the national 
strategic value of the Internet and the "national Informational space" In most CIS 
countries. 14 

Governments see the Internet as a very direct and personal media that reaches Into 
people’s homes faster and deeper than traditional media. As It Is subject to less 
regulation and less control than the traditional media, its potential impact on national 
security Is seen as greater than that of mass media. Consequently, several governments 
have actively moved to restrict foreign influences ostensibly to safeguard the citizens 
from being exposed to any "damaging" and subversive content online. This Is the 
case In Kazakhstan and Turkmenistan, and In 2009 the Issue of designating the Inter- 
net as a national strategic sector of the economy was Included In Russian legislation for 
a second time. 14 Such a designation would limit the percentage of foreign Investment 
In Internet companies and would expose the sector to a number of usage restrictions. 

Surveillance 

Russia's legal approach to Internet surveillance for law enforcement (that Is, the System 
for Operational-Investigative Activities or SORM-1I, which allows security services 
unfettered physical access to ISP networks) has influenced the way In which other CIS 
countries have approached surveillance of the Internet. 

At the regulator) 1 and technical level, SORM-II, (which came Into effect in Russia in 
2000 16 ) requires ISPs to provide the Federal Security Service (FSB) with statistics about 
all Internet traffic that goes through the ISP servers (Including the time of an online 
session, the IP address of the user, and the data that were transmitted). 17 The ISPs 
themselves are responsible for the cost and maintenance of the hardware and con- 
nections. ProsTders' objections to SORM-D, which raised concerns about Individual 
privacy, resulted In the ISPs being stripped of their licenses. 18 

In many respects, SORM-II Is not unlike a combination of the United States’ Com- 
munications Assistance to Law Enforcement Act (GALEA) 1 ’' and the recent "warrant- 
less" provisions for wiretapping. Including the PATRIOT Act 01 passed after the attacks 
of 9/11. Russian legislation formally protects individual privacy, prohibiting wire- 
tapping of any kind without a court order. 21 As a consequence, SORM-II requires gov- 
ernment personnel to obtain a court order to intercept telephone conversations, 
electronic communications, or postal correspondence. In reality, however, the FSB 
does not bother to seek a warrant. Recently, a senior FSB official sought to apply similar 
registration requirements for all mobile phones with Internet capabilities. However, 
despite this formidable surveillance potential, there Is doubt about the actual capacity 
of the FSB to analyze the data collected. 72 

Most CIS countries have followed Russia’s lead in Implementing Internet surveil- 
lance. These Include the following: 
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• Kazakhstan followed the Russian example, requiring ISPs to Install SORM-II in order 
to register and maintain electronic records of customers’ Internet activities. 

• Azerbaijan made an unsuccessful attempt to employ technologies similar to SORM-II. 
As of 2009, surveillance does occur, but mainly by way of visits to ISPs and Internet 
cafes by officials from the State Security Service. 

• In Uzbekistan, the pnndpal Intelligence agency, the National Security Service (SNB), 
monitors the Uzbek segment of the Internet and works with the main regulatory body 
to Impose censorship. As all ISPs must rent channels from the state monopoly provider, 
available evidence strongly suggests that Internet traffic Is recorded and monitored by 
means of a centralized system. SNB officers frequently visit ISPs and Internet caffe to 
monitor compliance. 

• In Ukraine, the security services have developed a capacity to monitor Internet traffic, 
and legislation has been proposed to limit access to "questionable'' content for reasons 
of national security. The security services are also empowered to Initiate criminal inves- 
tigations and use wiretapping devices. 

• In Belarus, special services conduct active and warrantless surveillance of Internet 
activities under the pretext of national security using a system similar to SORM-II. 

Russia, Belarus, Moldova, and Ukraine have all established specialized units under 
the Ministry of Internal Affairs (Department "K") trained In combating cyber crime. 
Specialized technical units have also been established In other security services and 
ministries of defense in these countries. 

Other Means to Control the Internet 

The ONI has documented the use of a wide range of measures to control the Internet — 
legal, administrative, and technological, as well as psychological: threats and physical 
violence, which usually are designed to cultivate a culture of selfcensorship among 
Internet users. In some cases these measures are used only at times of heightened polit- 
ical tensions and are limited In scope and duration, making them difficult to document 
and report. 

The following subsections list some of the second- and third-generation techniques 
documented by the ONI during the last four years. 

Event-Based Interventions The CIS Is the first region in which ONI research docu- 
mented the presence of "event-based" filtering. This form of filtering differs In techni- 
cal execution from more conventional filtering forms (such as those that rely on block 
lists) and Is more difficult to track and definitively ascertain. 

The Case of Kyrgyzstan (2005) During Kyrgyzstan's 2005 parliamentary elections, 
two ISPs were disrupted by distributed denial of service (DDoS) attacks. Following the 
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attacks, a "hacker for hire" posted threats to the affected ISPs' visitor logs, stating that 
unless these sites stayed off-line the attacks would continue. 23 The DDoS attacks effec- 
tively disrupted the ISPs’ services because the hacker exploited the ISPs’ narrow band- 
widths and dependence on a single satellite-based connection. It remains unclear who 
hired the hackers responsible for the attack, although an Investigation by ONI found 
that they were based In Ukraine (and were also responsible for an attack on a U.S. site 
using the same “bot" network). The opposition accused the government of ordering 
the attacks as a means of undermining them. The government responded by order- 
ing the affected ISPs to keep their resources online, but It was Impossible to do so be- 
cause the DDoS attack had degraded their ability to provide any services. In the end, 
the attack was stopped as a result of U.S. legal action against the originating "botnet,’’ 
which had also been attacking a U5. site. When the "botnet" was taken down, the 
attacks against the Kyrgyz sites also stopped. 

The Case of Belarus (2006) During the March 2006 presidential elections in Belarus, 
several opposition Web sites became suddenly Inaccessible, ostensibly because of inno- 
cuous network faults and domain name system (DNS) failures. Likewise, at the peak of 
protests against the election results, a major Minsk-based ISP ceased to provide dial-up 
services owing to “technical problems.” These occurrences meant that Important Inde- 
pendent media and opposition political Web sites were not accessible at periods when 
the Information they were conveying could have had political significance or acted as a 
catalyst for further political action. Although nothing transpired that could be Identi- 
fied as extralegal filtering, de facto access was not available when and where needed, 
with some evidence suggesting that tampering may have oexured. 2 * 

This form of "event-based" information control, which temporally shapes Internet 
access, can be said to represent the emerging next-generation Internet controls. Not 
unlike the shorter supply-line chains that boosted manufacturing efficiencies under 
"|ust-ln-tlme” production, event-based filtering can also be considered to be "|ust-ln- 
tlme,” as It offers greater efficiencies In denying access to Information when and where 
It Is needed. At the same time, the fact that this form of targeted and time-limited fil- 
tering Is much harder to prove also removes the potential liabilities of being caught 
undertaking more deliberative filtering. 

Crowd-Sourced Attacks: Pro-Covernment or Patriotic Hacktivlsts 
During the August 2008 Russla-Georgla war over the breakaway territory of Ossetia, 
pro-government Russian hackers launched DDoS attacks against a wide range of Geor- 
gian ISPs and Web sites. As a consequence, the majority of Georgian government 
Web sites, as well as official media sites were Inaccessible throughout the conflict. In 
response, Georgian ISPs filtered Russian Internet sites to prevent the dissemination of 
what they considered Inaccurate and inflammatory reports by Russian media. 25 The 
effect of the Russian DDoS attacks and Georgian filtering was to create an Information 
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vacuum In Georgia during crucial moments of the conflict, particularly as Russian 
troops crossed the Ossetian border and moved In the direction of the Georgian capital. 
While the Russian government denied responsibility lor the cyber campaign. It did 
little to stop these activities, even though most of the attacks originated from crowd- 
sourcing on Russian Web sites and chat rooms. 26 In many respects, the cyber campaign 
against Georgia resembled a scaled-up version of techniques previously used against 
opposition Web sites and independent media dunng elections In the CIS, and the ear- 
lier cyber attack against Estonia. 

The emergence of cross-border hacktlvlst activities, however. Is not a new phenome- 
non within the CIS. Similar attacks — albeit on a much smaller scale — have taken place 
between Armenia and Azerbaijan for more than a decade, where the monbund conflict 
over the region of Nagomo Karabakh continues In cyberspace. 

Administrative Mechanisms to Shut Down Access to the Internet 

Legal Deregistration of Domain Names and Web Sites Authoddes often resort to var- 
ious quasl-legal or "admlnlstradve'' mechanisms to suppress "Inappropriate" Infor- 
mation or shut down opposlflonal domain names (e.g., Kazakhstan, Kyrgyzstan). In 
Armenia, the president created an unprecedented media and Internet blackout after 
announcing a state of emergency following public protests. Based on the president's 
Instructions, the registrar of the top-level country domain suspended a number of in- 
dependent media and opposldon Web sites. 

Pro-government and patriotic social acdvlsm has become a feature of politics In 
several CIS countries. In Russia, the pro-government Nashl youth movement ran an 
aggressive campaign In cyberspace In support of the government during the 2008 par- 
liamentary and 2009 presidential elections. 2 ' The volume of blogs, online newspapers, 
and even posts to opposition and Independent media sites overwhelmed and over- 
matched critical posts or articles, and has proven a more successful mechanism for 
silencing the opposldon than resorting to Internet Altering or other more heavy 
handed repressive measures. 

Self-Censorship The consdtudons of the CIS countries prohibit censorship. None- 
theless, the net effect of the various sanedons (legal, administrative, technological) Is 
creating a general climate of self -censorship among ISPs In many CIS states, which are 
fearful of jeopardizing their licenses, and among individuals for whom prosecudon or 
imprisonment is too high a price to pay for voicing crlddsm. Often, self-censorship Is 
aided by opaque state practices. Many CIS countries deny that they Alter the Internet 
or resort to extralegal methods. In Azerbaijan, for example, the author of Web sites crit- 
ical of the government was detained on a number of occasions (on no legal grounds) 
without any follow-up or prosecudon. In other cases, such as the pervasive Altering 
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policies of Interne! cates throughout the region, the decision to limit content is for- 
mally controlled by the cafe owners, so It Is difficult to argue whether their filtering 
results from a fear of sanction for allowing politically sensitive material to be accessed 
or from personal choice. Certainly, for most Internet cafe owners, the objective Is to 
make a living, not to defy state policy. In Russia, self-censorship Is sometimes perceived 
as a citizen's responsibility. In Tajikistan, however, research suggests that filtering Is 
based on economic factors rather than fear of persecution from the security forces. 

Emerging Second- and Third-Ceneratlon Controls In the CIS 

Overt Internet filtering, such as that undertaken by China or Iran, Is unlikely to occur 
In the CIS for several reasons. First, only In a very few cases (Uzbekistan, Turkmenistan) 
Is the government disposed to effect an Informational blockade of the country that 
could, In turn, Jeopardize economic prospects and stifle the "scientific potential" of 
these technologies. Second, as noted earlier, governments generally have more subtle 
legal and quasl-legal methods for putting pressure on content and access providers to 
remove or otherwise eliminate “undesirable" content, so there Is little need to resort 
to overt technical means such as filtering. Third, many CIS states are dependent on 
development aid and trade, and have oriented themselves toward Integration with the 
global economy and are actively seeking to lower barriers on trade. Engaging In wide- 
spread filtering of the kind conducted by China or Iran would present the risk of being 
labeled as an "International human rights pariah," an eventuality that most CIS coun- 
tries would rather avoid. Fourth, and perhaps most Important, CIS states that are 
concerned about the Internet's empowering potential — that Is, Its potential to make 
possible further "color revolutions" — have found more subtle technical means for 
ensuring that these capacities are curtailed. If and when necessary. 

Telecoms and ISP Market Players Until recently, almost all CIS governments pre- 
served the monopoly right of the state telecommunication provider over International 
traffic. Under the pressure of International organizations (such as the European Bank 
for Reconstruction and Development, the World Bank, and the World Trade Organiza- 
tion), some CIS countries are abolishing the exclusivity provision over International 
traffic (Armenia). However, the need to demonopolize the service continues to be a sig- 
nificant problem in the rest (Kazakhstan, Turkmenistan, Uzbekistan). Since the traffic 
of all ISPs has to go through the state Incumbent's channels, filtering can be achieved 
easily, without outside control, while using centralized resources. The ISPs may un- 
knowingly receive filtered content because the main operator could Install filters on 
any information that It deems inappropriate. 

Russia, for example, does not require that the ISPs buy International traffic 
from a major state provider. Nonetheless, Russia has Introduced other practices 
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unprecedented for other industrialized countries. There are multiple players on the 
Internet market, but few of these are the major ISPs that proside International traffic 
to the groups of small regional providers. Interestingly, most of the big telecommu- 
nication operators (If not all) are owned or controlled by the large state company 
Svyazlnvest. Control In Russia Is not easily detectable but permeates the ownership 
and control structure of the operators. The Russian Internet (Including operators 
and popular blog servers) remains a playground of Interests for the state and pro- 
government oligarchs. 

Upstream littering 

For Its size, the CIS region has a relatively underdeveloped telecommunications sys- 
tem, much of which remains centered on Russia. At the same time, the region Itself Is 
contiguous with (or borders) Europe, Asia, and — via the circumpolar route — North 
America. This centrality means that most countries In the region obtain connectivity 
from several different sources beyond Russia. This situation has created some Interest- 
ing patterns In hltenng behavior, such as similar content becoming Inaccessible across 
several different countries, but with different filtering patterns among content pro- 
viders within any single country. 

Some of the CIS countries are buying connectivity from European and Aslan opera- 
tors. An Interesting phenomenon that ONI confirmed Is that private operators some- 
times effectively influence online behavior of foreign operators. For example. In 2008, 
YouTUbe was not accessible In Georgia for a few days because the main ISP in the 
country was buying International traffic from TUrkTelecom. The Turkish operator, 
however, often executes bans against the multimedia site In the implementation of 
the controversial Internet law. 28 Since the local ISP provides Internet service to more 
than 8S percent of the users, this block rendered YouTUbe Inaccessible to the majority 
of Georgians. 

Judging by common indicators appeanng In almost all CIS countries, ONI research 
suggests that providers reselling connectivity to CIS countries may be providing prefil- 
tered access, passing on filtered content either as part of their service offering or as a 
consequence of the policies they use to manage traffic on their own networks. This 
form of blocking, which we have dubbed "upstream" filtering (Indicating that the fil- 
tering Is happening In a jurisdiction other than that of the state In question), was first 
observed during ONI testing in Uzbekistan in 2004. At that time, the traffic of one 
Uzbek ISP was clearly filtered using a pattern similar to that employed by Chinese 
ISPs. Further Investigation revealed that the Uzbek ISP was buying connectivity from 
China Telecom, which In this case may have sold access to Its network as it would to 
a regular Chinese client. Testing conducted by the ONI In 2006, 2007, and 2008 reveals 
similar patterns of prepackaged filtering affecting Internet services within several other 
CIS states where ISPs had purchased their connectivity from a Russian provider. 
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Conclusion 

The CIS region Is experiencing a general trend toward greater regulation and control 
of the national Information space, which Includes the Internet. Although most CIS 
countries do not practice substantive or pervasive filtering — with the exception of 
Uzbekistan and Turkmenistan — Internet content control through regulation or intimi- 
dation Is growing throughout the region. Countries deny allegations that filtering 
based on "official" requests Is taking place. Governments are becoming more creative 
In designing new ways to Influence the content posted online and to shape the Infor- 
mation environment. At times, filtering Is justified by national Interests or by other 
broad notions like "public morals" that answer the needs of the ruling elite and submit 
the rest to self-censorship. 

Moreover, the laws are often unevenly applied, with "flexible" Implementation 
often paired with other more subtle (but effective) measures designed to promote self- 
restraint (or self-censorship) of both ISPs and content producers. Information control 
— In particular the protection of national Informational space — Is clearly an Issue of 
concern throughout the CIS, and It has encouraged more stringent attention to tele- 
communications surveillance. In addition, measures to deny access to Internet content 
at sensitive times, flagged as "event-based filtering," to limit access to content geo- 
graphically through "upstream filtering," or to Influence accessed Information In a 
neighboring country because of International control of the Internet traffic routes are 
Indicative of a new seriousness with which strategies for Information control are being 
developed. The CIS region is leading the world In the evolution of second- and third- 
generation information controls. The trend toward new authoritarianism, combined 
with shifts in regional power relations that include a relative decline in U.S. influence 
and Chinese ascendancy, suggests a tendency toward greater control. These are un- 
likely to manifest themselves in Internet filtering as overt censorship, but rather will 
take the form of attempts to shape the Information space creating a growing climate 
of self-censorship. The success (or lack thereof) of this approach Is likely to shape 
policy choices well beyond the CIS region. 


Notes 


1. The OpenNet Initiative did not conduct formal testing or monitoring during the 2008 Russian 
parliamentary elections ot the 2009 presidential elections. However, persistent allegations of 
denial of service attacks being used against opposition Web sites, and the mobilization of pro- 
govenunent liacktivism by pro-government groups such as Sushi. were widely reported In the 
press. These tactics are consistent with those observed and documented by the ONI in Kyrgyzstan 
and Belarus. 

2. Internet users in the CIS are predominantly young, aged between 15 and 25. Around 55 per- 
cent of all users in Azerbaijan belong to this age group, compared with 60 percent in Kyrgyzstan 
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Armenia 


Access to the Internet In Armenia Is 
largely unfettered, although evidence 
of second- and third-generation filter- 
ing Is mounting. Armenia's political 
climate Is volatile and largely unpre- 
dictable. In times of political unrest, 
the government has not hesitated to 
put In place restrictions on the Inter- 
net as a means to curtail public pro- 
test and discontent. 




Background 

Located In the heart of the Caucasus region, and situated between Turkey, Georgia, 
Azerbaijan, and Iran, Armenia relies on diplomacy In order to overcome political and 
economic Isolation. Because of Its unique geographical situation — and unlike most for- 
mer Soviet countries — Armenia has traditionally been ethnically and religiously homo- 
geneous. Armenia Is a semipresldentlal republic where the president (currently, Serzh 
Sargsyan) holds a substantial amount of power, particularly in the areas of defense 
and national security. Like the other CIS republics, Armenia has experienced the hard- 
ships of switching from a centrally planned system to a market economy. The land- 
locked status of this country coupled with poor transportation Infrastructure has not 
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1 KEY INDICATORS J 

COP per capita, m (constant 2005 international dollars) 

5,377 

Life expectancy at birth (years) 

72 

Literacy rate (percent of people age 15+) 

99 

Human development index (out c4 1 79) 

83 

Rule erf law (out of 211) 

125 

Voice and accountability (out of 209) 

145 

Democracy index (out of 167) 

113 (Hybrid regime) 

Digital opportunity index (out of 1 81 ) 

117 

Internet users (percent of popnJation) 

5.8 


Source by inrfaator World Bank 2009a, Work) Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economic InteBgence Unit 2008, ITU 2007, Miniwatb Marketing 
Croup 2009. 


eased Armenia's economic transition. TTie Nagorno-Karabakh war with neighboring 
Azerbaijan and uneasy political relations with Turkey have further complicated this 
process. Russia remains Armenia's main strategic partner in the region, and the two 
countries are parties to a bilateral military agreement. Armenia Is also seeking close 
political, economic, and strategic ties with the United States and NATO. Although the 
government has implemented far-reaching economic measures. Including joining the 
World Trade Organization In 2002, poverty In Armenia remains widespread, and Its 
economy Is critically dependent on foreign support. 

Internet In Armenia 

The number of Internet users in Armenia Increased from 161,000 In 2006 to 172,800 in 
2008— the latter figure represents S.8 percent of the population. 1 Armenia has 90,000 
Internet subscribers, representing 2.97 percent of Armenia's population. Low-speed 
dialup access still dominates among private users (about 80-8S percent) and most com- 
panies use DSL and Wl-Fl broadband access. In addition, official sources suggest that 
Internet penetration Is less than 4 percent 2 In June 2007, the Incumbent operator of 
the telephone network (Armentel) Introduced DSL services — they represent approxi- 
mately 76 percent of the capital city of Yerevan's population and IS percent of the 
population of rural areas. 3 Local statistics show that fixed-line penetration amounted 
to around 18 percent, 4 while International sources point to 19.7 percent. 4 

Owing to the high level of urbanization In the country, the percentage of access to 
basic telephony appears high. While It has been officially estimated that 9S percent 
of households In the capital and 75 percent of households In other major cities have 
access to public telephone networks,® In reality only 40 percent of households have 
Individual telephone connections, and the quality of service Is extremely jx»or. 
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Most users access the Internet from home and work. Internet cafe, which grew rap- 
idly in the 2QOO-2GOS period, currently attract fewer users. DuHng the last two years, 
the number of Wl-Fl hot spots has significantly increased, covering Yerevan’s center 
and some residential areas. There is little Internet penetration outside Yerevan, mainly 
because of poor Infrastructure, low Income, and low levels of computer literacy. The 
most popular languages among Internet users are Russian. English, and Armenian. In 
200S, 40 percent of Web sites visited from within Armenia were located In Russia. 30 
percent were In Europe and the United States, 26 percent were local resources, and S 
percent were hosted in other countries. 7 

The high cost of Internet access for some years slowed down the entry of foreign 
providers Into the market. 8 Over the last couple of years, the number of ISPs providing 
WI-FI and broadband connections has been Increasing, resulting in price cuts. Despite 
the Increased affordability. Internet access Is still expensive In comparison to most 
European countries. Monthly unlimited dial-up access service costs AMD 7,500 (USD 
24.50) 9 in Yerevan and about USD 30 In rural areas. The cost of dial-up of Beeline, 
however. Is the same for rural and urban areas. If the user prefers megabyte services, 
connection speeds are not dedicated and can vary from 64 Kbps to 1 Mbps, depending 
on the area and time of day. 10 

Regulatory enforcement against dominant market players has been problematic. 
However, in July 2008, Armenia's antitrust regulator Imposed a fine on beeline for 
anticompetitive behavior. 1 1 In the wake of the regulator's decision, the market has 
enjoyed greater competitiveness, and Internet services have expanded. 

Armenia was one of the first of the former Soviet countries to privatize Its tele- 
communications Industry’. 12 In August 2007, the Russian VlmpelCom 1 * acquired a 
majority shareholding In ArmenTel, the Incumbent telecommunications operator, 
and subsequently bought out the rest. In February 2008, VlmpelCom registered the 
operator’s license, allowing ArmenTel to use the Beeline brand on the territory of 
Armenia. 1 * Until 2007 the Incumbent operator en|oyed a monopoly over International 
connections and other services. Consequently, the liberalization of International Inter- 
net access Introduced only In 2007 radically altered the Internet access market. The 
cost of International connections significantly decreased, but It Is still higher than in 
European and some CIS markets. 14 The incumbent operator owns the main telecom- 
munications Infrastructure Including the Trans- Armenian Optical System (the national 
fiber-optic backbone), satellite antennas, the entire fixed telephone Infrastructure 
(PSTN), and most of the country's cellular Infrastructure, which covers about 85 per- 
cent of Armenia. 

The telecommunications regulation authority renewed ArmenTel's license, stripping 
It of Its monopoly In some telecommunications services. However, ArmenTel has 
maintained Its de facto monopoly of the fixed-line market. This situation may change, 
as two ISPs (Armlnco and Comet) announced they would start offering fixed-line 
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communication services by the end of June 2009. 16 Nonetheless, as the networks of all 
operators are connected to ArmenTel's Infrastructure, the incumbent will continue to 
dominate and benefit from Interconnection fees. 

Although ISPs are Increasingly building their own fiber-optic networks, cable infra- 
structure Is still underdeveloped In Armenia. Over the last three years, more than three 
ISPs have extended their network to cover the capital, while networks In rural areas 
have been developing at a much slower rate. 

Satellite services are relatively well developed in Armenia; however, the demand for 
them Is not significant because of their higher cost. Home users utilize satellite services 
almost exclusively for television. Downlink satellite services are widely used by ISPs In 
the capital city and rural areas because they provide the only means of supplying Inter- 
net services without requiring physical networks. Nonetheless, the development of 
two-way satellite services in Armenia has been affected not only by their high cost but 
also by administrative barriers to importing and using radio equipment. 

The ma|orlty of the main ISPs are owned by Armenian entitles. The main ISPs in the 
country are ArmenTel (operates under the beeline brand), 17 Arminco LLC, 18 WEB 
LLC, 19 Xalt LLC, 20 Netsys LLC, 21 ADC CJSC, 22 Comet-AM QSC. 23 Flbernet Commu- 
nication LLC, 24 and Freenet Armenia. 24 There are numerous small ISPs supplying Inter- 
net services to large companies or to certain geographic areas. However, their number 
Is decreasing as a result of strong competition, and they recently Introduced high li- 
cense fees and state duties (regulated by the Law on State Duties), which have led to 
Increasing consolidation In the market. At least two foreign ISPs are expected to enter 
the market In 2009. 

Most ISPs gain access to the International backbone by way of ArmenTel's fiber-optic 
cable (Trans Armenia Optical System) 2 * with 1S5 Mbps capacity, which connects to the 
Georgian Optical Highway and then to Russian and European channels. The second 
national backbone, routing through Iranian territory, commenced operations In Sep- 
tember 2008. ArmenTel bought this cable, which connects to Sovlntel (VlmpelCom's 
subsidiary).* 7 The third International route over the TRASEKA fiber-optic cable Is 
owned by the state and is operated by Flbernet LLC on the basis of a 2S-year conces- 
sion agreement. 

As an alternative route, ArmenTel utilizes the Teleglobe satellite connection, limited 
to 2 Mbps. Major ISPs such as Arminco and WEB LLC have built their own infrastruc- 
ture, mainly fiber-optic networks and wireless networks, and also use satellite con- 
nections (usually via PlanetSkye and SatGate). 

There are three nonprofit fiber-optic networks constructed with the assistance of 
foreign and International organizations that supply Internet services to scientific and 
educational Institutions: ARENA Foundation, National Foundation for Science and 
Advanced Technologies, and Academic Scientific Research Computer Network of 
Armenia (ASNET-AM). 
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There Is no Internet exchange point used by all Armenian ISPs. However, most ISPs 
are Interconnected, and local traffic is not charged yet. The Armenian top-level domain 
".am" Is administrated by the Armenian Internet Society. 2 ’ 

The provision of VoIP services has raised a number of conflicts between the incum- 
bent operator, new market players, and regulatory authorities. At present. ISPs and 
other private service providers are allowed to freely use the incumbent's fixed network 
for the provision of VoIP services. According to data provided by the Public Services 
Regulatory Commission, from May 2007 to May 2008. 108 companies were granted 
authorization to provide VoIP services.** 

There are two mobile telephony operators In Armenia: Beeline and Vlvacell-MTS. 
both controlled by Russian companies. Vlvacell-MTS entered the market In 200S under 
the name K-Telecom. 10 Each mobile operator In Armenia serves approximately 1 mil- 
lion users. 31 The cost of mobile communication services varies from USD 0.10 to 
0.16 per minute. A third mobile operator (Orange France Telecom) recently obtained a 
license to operate in the country and Is expected to enter the market by the end of 
2009. Its entry might reduce mobile communication costs. 

Legal and Regulatory Framework 

In June 2001, the government Issued a Concept Paper announcing that ICT Is a prior- 
ity for the country's economic development. Pursuant to a presidential decree, the gov- 
ernment created the ICT Development Supporting Council (1TDSC). an advisory body- 
chaired by the prime minister. The ITDSC was established as a communication plat- 
form for stakeholders to propose and discuss Issues in the area of telecommunications 
policy and regulation. In 2003, the government launched the "E-Armenla" initiative. 
However, progress toward Implementing the proposal and the Concept Paper was 
interrupted by the parliamentary election In 2003 and presidential election In 2004, 
and little progress has been made on relaunching either initiative since. 32 

Finally, In July 2008 the government approved the Concept Paper on Development 
of the ICT sector in Armenia. In contrast to the Concept Paper of 2001, the former lays 
out short- and long-term action plans with fixed timetables for fostering an Informa- 
tion society and ensuring sector competitiveness. 

The Law on Electronic Communications adopted In July 2005 regulates electronic 
communications In Armenia. The Ministry of Transport and Communications is re- 
sponsible for formulating sector policy and setting universal service objectives. 

In 2006, the Public Services Regulation Commission (PSRC) took on the role of 
the regulatory authority for telecommunications In line with the Law on Electronic 
Communications. 33 The Telecommunications Department of the PSRC develops and 
enforces a package of Important regulations, including criteria for license holders 
and their reporting standards, standards for cost accounting and archiving, quality of 
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service, and cost calculation standards (or the Incumbent operators and service pro- 
viders. Even though the government does not have direct political influence on the 
decisions o( the regulator, the PSRC Is not entirely independent, as it Is financed by 
the state and Its members are appointed by the president upon nomination of the 
prime minister. The regulator frequently does not consult with operators on all Impor- 
tant questions that aflect them. 

In the context of other CIS countries, Internet legislation In Armenia has demon- 
strated liberal trends. For example, Armenia was one of the first countries that opened 
the 2.4-GHz frequency band for free use by ISPs and end users. Data services have been 
fully liberalized since December 2006 and voice services since October 2007. There are 
four types of licenses for providing communication services: (1) a generic "network" 
license; (2) a license for the provision of electronic communications services (data 
transmission and Internet access); (3) a license for providing VoIP services; and (4) a 
license for utilization of radio frequencies. 

Generally, the fees for obtaining a license are low. Electronic communications and 
VoIP licenses are obtained after a relatively simple procedure. By contrast, network 
licenses are granted through a rather complicated process. 

The supply of leased-Une services has always been an obligation of the incumbent 
operator In Armenia. Although the license requires the incumbent to provide leased- 
llne services on a transparent and nondlscrtmlnatory basis, communications providers 
have complained of the selective provision of leased-llne services and alleged frequent 
refusals by the Incumbent. The tariffs for leased-llne services are subject to approval by 
the national regulator. The legal regime for local loops unbundling and access to the 
network still does not meet International standards, a fact which negatively aflects 
market competition. 

With regard to media rights, the Armenian constitution guarantees freedom of ex- 
pression, media, and other means of mass Information (Article 27) and freedom of 
entrepreneurship and ownership. 34 Armenian media have become Increasingly 
restricted since 2003. Most newspapers act as a mouthpiece for official political agen- 
das, and television stations are predominantly progovemment. 15 In practice, censor- 
ship Is widespread among journalists. 

In 2005, Armenia signed and ratified the Optional Protocol of the Convention on 
the Rights of the Child on the Sale of Children. Child Prostitution, and Child Pornog- 
raphy. Armenia's Criminal Code Implemented these conventions, criminalizing. Inter 
alia, the possession and distribution of child pornography on computer networks. 
Moreover, according to the Law on Mass Media (2003), the publication of any kind of 
pornographic material In mass media (including the Internet) Is prohibited- Indeed, 
there have been at least two criminal convictions over the last three years related to 
the dissemination of pornographic materials on the Internet. 
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Surveillance 

In Armenia, there aie no express provisions to conduct monitoring of online content. 
Furthermore, ISPs and companies providing Web hosting services are not obliged to 
monitor the content of transmitted and stored content. In addition, under Armenian 
law It Is necessary to prove gross negligence or actual knowledge In order to Impose 
liability upon an Internet hosting company or ISP for hosting Illegal content. However, 
ISPs must block access to particular content on request from law enforcement agencies 
for the purposes of crime prevention. 

Following the February 2008 elections, widespread protests led the outgoing presi- 
dent, Robert Kocharyan, to sign a state-of-emergency decree Imposing severe restric- 
tions upon mass media and Internet publications for a 20 -day period.* 6 Consequently, 
Armenia faced both media censorship and Internet blocking for the first time since 
Its Independence. This blockage targeted Armenia-based sites, as well as YouTube after 
a sldeo showing clashes between protesters and police was uploaded. The blocked 
Web sites Included news portals, opposition Web sites, foreign media, and blogging 
services. The blocking was not extended beyond the onglnal 20-day term because of 
International pressure. The media and Internet blackout created an unprecedented op- 
portunity for bloggers to provide alternative viewpoints on the situation In Armenia, as 
during this period they were one of the few information outlets available. 

Internet censorship has been Implemented In two ways. First, the Armenian Internet 
Community simply froze several subdomains In the ".am" domain (such as aiavot.am, 
hzh.am, echannel.am, azatutyun.am, and others). Thus, the Web sites were accessible 
only through their IP addresses. Only one week later, the Armenian Internet Commu- 
nity announced that this measure was to be enforced by the National Security Service 
(NSS). After the order from the NSS, some ISPs blocked access to a number of Web sites 
on a preselected blacklist. 

Second, surveillance Is regulated through the Code of Criminal Procedure of Arme- 
nia. The cock provides that surveillance should be carried out only pursuant to a court 
warrant when applied to restrict legally guaranteed rights and freedoms (Article 284). 
The warrant must Indicate grounds for the measures, the data that are being obtained, 
and the venue and duration of the surveillance and accompanying data substantiating 
the necessity for the warrant. 

There are some exceptions to the need for a warrant — for Instance, when a delay in 
the Implementation of the search could lead to a terrorist attack or threats to national 
security, military, or environmental Interests. The court has to be notified within 48 
hours of the measures being taken. If the court finds that the grounds for the Imple- 
mentation of the search are Insufficient, surveillance shall be Immediately stopped, 
and the materials and data obtained deemed Inadmissible as evidence. 
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Finally, Article SO (3) of the Law on Electronic Communications sets forth an obliga- 
tion on operators and ISPs to assist law enforcement investigators In conducting sur- 
veillance measures. 

ONI Testing Results 

In 2007 and 2008, the ONI ran tests on the first-tier ISPs In the country: Armlnco, 
WEB, and Netsys. During Armenia's state-of-emergency, ONI monitored the media 
and Internet blackout In the country and concluded that pervasive filtering was occur- 
ring. The ONI detected a large number of blocked Web sites. Including regional sites 
providing Information on ethnic and religious freedom groups, Armenian opposition 
sites, Russian opposition sites and youth movements, personal blogs, an Armenian 
Internet portal, and a political and cultural site about Nagorno-Karabakh. A number 
of International and regional (mainly Russian) media sites, e-mail services, and search 
engines were also filtered. In addition, leading Armenian online media were Intention- 
ally blocked. Few pornographic, LGBTQ, and drug-related sites were blocked. 

Conclusion 

Armenia has struggled through political Instability, regional conflict, and widespread 
poverty and unemployment. The new president has pledged to carry out reforms that 
would decrease corruption, Improve living standards, and enhance foreign confidence 
In the economic development of the country. The crackdown on the media and the 
Internet In sensitive times, however, reveals that the government is likely to resort to 
such measures in order to stifle public criticism. 
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(Solicited broadband lines, ENUM registration, VoIP. IPTV (beta test phase), wireless access in 1 1 
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one of the official registrars of the "-am" domain. See WEB LLC, http://www.web.am/. 
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22. The operator is owned by the Armenian -Norwegian Armenian Datacom Company (ADC) and 
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Armenian Datacom Company, http:tfwww.adc.am/. 
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tional *1*1 research organizations and pjvenunent and other institutions. For local users Uie 
project provides free access to their servers through dial up lines, as well as fuU access to national 
WWW resources, and to Uie computers in their two Public Access Sites. The ArmFN provides con- 
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nection to tlx? server that activates the user's account using POP3, telnet, and FIT Internet proto- 
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and a southern "tail" running from Yerevan to Meghri on Use border with Iran. From Vanadzor 
the backbone has a northward extension to Georgia, and thence to Russia and the Black Sea 
submarine cable system. TAOS is the principal infrastructure providing national and international 
connectivity. TAOS passes through some 30 major cities in Armenia, serving approximately 60 
percent of the population of Armenia. An additional component of TAOS is Beeline's metropoli- 
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The Internet In Azerbaijan remains 
largely free from direct censorship de- 
spite the government's heavy-handed 
approach to political opposition 
and evidence of second- and third- 
generation controls. Azerbaijan has 
a growing Internet population, sup- 
ported by a national strategy to 
develop the country Into an Informa- 
tion and communication technology 

(ICf) hub for the Caucasus region. The Azerbaijani government actively seeks to 
attract foreign aid to help boost the telecommunications and ICT sectors. 1 
Investment In the Id sector has been prioritized, with Id seen as an essential pil- 
lar for diversifying the country's oil-dependent economy — an Important policy 
given that Azerbaijan's rich oil and gas reserves are expected to run out In the 
next 20 to 40 years. Azerbaijan's transition from war and instability In the 1990s 
under the charismatic former president. Heldar Aliev, has left the political opposi- 
tion weak and fragmented and has led to certain authoritarian tendencies In the 
government. The Internet Is also beginning to surface as an Important medium 
and space for political communication, and there are some Indications that 
restrictions on content may emerge In the future. 



Background 

After a decade of civil unrest and a disastrous war over the territory of Nagorno- 
Karabakh, Azerbaijan recovered and stabilized under the strong hand of former Presi- 
dent Heldar Aliev (elected in 1993). Since then, the country's political life has remained 
dominated by the presidential apparatus. In 2003, Heldar Aliev was succeeded by his 
son Ilham Aliev in an election whose fairness Is questioned by International observers. 2 
In October 2008, President Ilham Aliev was re-elected. Transparency International has 
ranked Azerbaijan as one of the most corrupt countries In the world.-* 

The high economic growth In the country over the last several years Is largely due 
to revenues coming In from oil and gas sales. Seeking to advance other sectors, the 
first President Aliev strongly’ promoted ICT as a pillar for national development, enact- 
ing a national ICT strategy In 2003 that set ambitious targets for the development 
of Internet in government, education, and the industrial sector. 4 However, the poor 
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Infrastructure and slow regulator)’ reforms In the country proved to be a challenge In 
developing medium-level local business and attracting foreign Investors. 

The Internet plays an Increasingly Important role In dally life. Including politics. 
Opposition groups as well as Individuals use the Internet as a communications plat- 
form, prompting sporadic crackdowns by authontles. The opposition In Azerbaijan is 
weak, and Its leaders are often targets of government repression. A number of cases 
have been reported where journalists have been arrested for criticizing the government 
policies . 4 

Opposition groups In Azerbaijan are "seasonal" and not well coordinated. Most of 
the opposition and political media Web sites are created during elections and are not 
periodically updated. After the elections, domain names used In the campaigns are 
usually left to expire. Hardly any political media or opposition groups' Web sites have 


1 KEY INDICATORS || 

GDP per capita. PPP (constant 2005 international dollars) 

7,414 

Ue expectancy at birth (years) 

67 

literacy rate (percent of people age 15+) 

100 

Human devetopment index (out of 1 79) 

97 

Rule of law (out of 21 1 ) 

161 

Voice and accountability (out of 209) 

1 77 

Democracy index (out of 1 67) 

1 35 (Authoritarian regime) 

Digital opportunity index (out of 181) 

101 

Internet users (percent of poptiation) 

18.2 

Source by intfeator World Bank 2009a. Wortd Bank 2009a, World Bank 2009a. UNDP 2008, World 


Bank 2009b, World Bank 2009b, Economist Intefflgence Unit 2008, ITU 2007, Mniwatts Marketing 
Croup 2009. 
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been created since 2007 when elections were last held. 6 Even though there were 
expectations of Increased political activity online from the opposition before the Octo- 
ber 2008 presidential election, no notable political discussion was documented. By 
contrast, the president and the government update their Web sites penodlcally. 7 

Online groups are popular with young Internet users. Most of these groups focus on 
Issues of practical Interest — that Is. free mailing lists, file-hosting services, forums, dat- 
ing. blogs, and WAP services. A few opposition youth groups have focused on organiz- 
ing public actions against corruption and freedom of speech (e.g., Dalga. Ol). One 
example of such youth activist groups is the ANTV — the first organized and moderated 
Azerbaijani video channel on YouTube, which alms to reveal unpopular decisions 
taken by officials. 1 * Based on the reaction of state officials to events highlighted by 
ANTV, It Is likely that officials are tracking It regularty. 

The Internet has also become a source of Information for government bodies and the 
police. For example, at the beginning of 2008, the police tracked down online Informa- 
tion from a car drivers' community Web site In relation to a forthcoming street race. As 
a result, the police arrested 17 young drivers for speeding. 

The longstanding "cyberwar’' over the unresolved Nagorno-Karabakh conflict be- 
tween Azerbaijani and Armenian hackers continues to take place, although rather 
Infrequently. No official sanctions have been Imposed upon Azerbaijani hackers. The 
attacks do not appear to be part of a government-organized campaign, but rather the 
work of Individuals acting on their own. Web site defacements and DoS attacks have 
also led to disruptions In the Azerbaijani Internet. 

Internet In Azerbaijan 

During the Soviet era, Azerbaijan was a major center for FT development, particularly 
In the area of process control systems. This legacy left the country with a reasonably 
large and well-developed technical Infrastructure, Including several research Institutes 
and a jMilltlcal leadership savvy about the importance of the ICT sector. Internet devel- 
opment is following the pattern typical of many developing countnes, with access cen- 
tered on major cldes, particularly the capital city Baku. Overall Internet j>enetratlon Is 
rising as a result of the support of the government's ICT strategy as well as the large 
Azerbaijani diaspora, for whom the Internet Is increasingly an Important channel for 
maintaining contact with their homeland. The number of Internet users has grown 
over the last several years to l.S million users, or 18.2 percent of the populadon, as of 
March 2009, estimated by the Ministry of Communications 9 (or dose to 17 percent for 
2008 according to the latest esdmates of ITU* 0 ). 

Many Azerbaijanis access the Internet from shared connections, such as their 
place of work or study, or from Internet caffe (with the latter providing access for 19 
percent of users In 2007). The rate of ownership of computers Is low (2.4 units per 
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100 Inhabitants), and Internet usage In homes Is moderate — It accounts lor 41.6 per- 
cent ol the total usage for 2007, up from 36.4 percent lor 2006. For connectivity, 
some Individual subscribers rely on mobile telephony, though access remains expen- 
sive. with most using dial-up services as their primary means. Official survey results 
for 2007 Indicate that economic and educational barriers are the main contributing 
factors for these low figures, with 31.4 percent blaming the high cost of computer 
equipment and 21.8 percent Indicating a lack of necessary skills." 

The Ministry of Communications and Information Technologies (MC1T). together 
with the Ministry of Education. Microsoft, and Hewlett Packard, has started the pilot 
stage of the National PC Initiative aiming to provide conditions for a rapid Increase of 
the PC penetration rate (up to 15 percent) and e-soclety development." The state- 
backed Program on Information of the Education System (2008-2012) plans to provide 
Internet connectivity to all the schools of Azerbaijan. Currently, more than 200 sec- 
ondary schools have been connected to the Internet (ADSL). 

The cost of Internet service remains high for the average citizen: a DSL connection of 
64 Kbps costs around USD 40-50 per month, and unlimited monthly access costs 
around USD 35. For comparison, the average salary In the country Is slightly over 
USD 300 per month. While the cost of international traffic has gone down over the 
last several years, the cost for usage of the local Infrastructure remains unchanged. Ap- 
proximately SO percent of the expenses of small ISPs are local connection costs paid to 
the state-owned company controlling the market. Because these expenses are the same 
for all providers, they have agreed among themselves to charge end users the same 
price for unlimited monthly dial-up service. Larger providers temporarily blocked the 
ISPs that tried to contravene the concerted practice. In December 2007, for example, 
two small providers— SuperOnllne and AvlrTel— were blocked by local ISPs (Adanet 
and IntraNS) while trying to provide service at a lower price for the customers. Shortly 
after the providers agreed to bring the price of their services into line, the block 
was lifted. For similar reasons, the larger ISPs blocked another smaller local ISP— 
Azeronllne. 

In Azerbaijan, fixed-line telephony Is largely centralized in the hands of the state- 
owned telecom provider AzTelecom, which also acts as a commercial ISP. Delta Telecom 
(previously operating as AzerSat) Is the main ISP In the country, supplying Interna- 
tional connectivity to at least 90-95 percent of all users. Delta Telecom also owns the 
Internet international gateway and sells International traffic to almost all ISPs. 

The nonprofit AZNET/AZRENA project provides connectivity to the educational 
and research community and benefits from a satellite channel built under NATO's 
"Silk Road" project. AzEuroTel started commercial activity as a telecommunications 
company and thus managed to establish a relatively wide network infrastructure. 
AzEuroTel and Adanet also have satellite channels to Russia. AzerOnline, which Is 
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funded predominantly by the largest mobile operator, AzerCeU, has an additional sat- 
ellite connection to Turkey. The cost of satellite connection Is very high because of the 
monopoly regime set by the MCrT. 

Since the second half of 2007, Azerbaijan does not have a free Internet Exchange 
Point (IXP). Delta Telecom controls the only IXP and charges the same amount for 
local and International traffic. Providers have not been able to agree on setting up 
another IXP. The external traffic of Azerbal|an Is now 6 Gbps, which is a notable in- 
crease from the 1SS Mbps capacity of 2006. Delta Telecom has external fiber-optic con- 
nections with Russia via TransTelecom and with Turkey via RosTelecom.'* (Indirectly, 
Delta Telecom serves Georgian users because a local ISP, TransEuroCom, buys inter- 
national traffic from Delta and carries It by fiber to Georgia. Through the TRACECA 
Fiber OpOc Cable fine, TransEuroCom Is connected also to the TurkTelecom in Turkey.) 

State control over domain name registration is limited. The assignment of the coun- 
try code domain name ".az" is controlled by AzNlc, Ltd., a |olnt venture between three 
Azerbaijani firms. The cost for a one-year registration is USD 34. Network Technologies 
(a subsidiary of IntraNS) Is the company that carries out the registration and adminis- 
tration of the top-level domain level (TLD) In the country. Domain name registrations 
cannot be done online. Instead, a client is required in most cases to go In person to the 
offices of the domain name holder. Since 2002, the number of registered domain 
names has rapidly increased, with approximately 3,000 first-level and more than 
6,000 second-level domains registered under the ".az" domain. 

The Azerbaijani Internet population Is young, mostly male, and largely concentrated 
In urban areas: more than SS percent of the users are people In the age range of 16 to 
24, and approximately 70 percent of the users are male. During the 1990s, the official 
language of Azerbaijan switched from Russian to Azerbaijani, and the script from Cyril- 
lic to Latin. As a result, the number of Web sites using Azerbaijani language Increased. 
Due to the Increased use of blogs by young people, several local blog servers were cre- 
ated In the Azerbaijani language. However, most of the bloggers still post on Russian 
blog servers, and others on Western European and Turkish sites. The Azerbaijani lan- 
guage Is currently used on all official government Web sites, as well as within main- 
stream media and the general Internet population. 

Mobile telephony Is Increasingly popular among the younger population. This Is 
especially the case In rural areas where the fixed-line infrastructure is poor and people 
are increasingly subscribing to mobile services. The ma|or mobile oj>erator In the 
country Is Azercell with more than 3S percent MC1T participation. BakcelL the second 
operator, is relatively small. Azercell recently started offering mobile e-mail services. 
Both operators provide coverage of the whole Azerbaijani territory (except the terri- 
tory of Nagorno-Karabakh). In March 2006, the MCTT agreed to grant a license to a 
third GSM operator. Azerphone. 14 Catd 15 started operation earlier. The state telecom. 
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AzTelecom, has participation In the two new mobile operators. AzerceU, Bakcell, and 
Azerphone provide WAP and CRT’S services. Mobile providers also use Delta Telecom’s 
external channel for Internet. 16 

Legal and Regulatory Frameworks 

Even though Azerbaijan made telecommunications and Internet national development 
priorities, the telecom regulatory framework remains Insufficiently developed. The 
MCIT acts as both regulator and operator. In 2008, the MC1T moved to separate the 
two functions but has not yet completed this process. Some telecommunications serv- 
ices must be licensed. 1 ' Including VoIP. 18 

The ma|oi public telecom operators are the government-owned AzTelecom, Azeron- 
llne. IntraNS, Adanet, and AzEuroTel (SO percent owned by the MCIT and SO percent 
by a British company). Around half of the telephone lines In Azerbaijan are analog, 
and more than 8S percent of the main lines are In urban areas. The MCIT has adopted 
a program for development of telecommunications aimed at modernizing the tele- 
communications Infrastructure. 

Under foreign pressure, the government has taken steps to liberalize the ISP market. 
Compulsory state licensing for ISPs was eliminated In 2002, 19 although the MCIT has 
continued to Ignore this provision on Isolated occasions. The MCIT continues to hold 
about a SO percent share in a few of the leading ISPs in Azerbaijan. Azerbaijan applied 
for World Trade Organization (WTO) membership In 1997, and even though some 
progress In liberalization of services was made, the country still remains on the acces- 
sion agenda. It has been suggested that there Is not enough jrolltlcal will to Join the 
WTO, mainly because local businesses fear the loss of their advantageous position In 
the internal market. 

From a regulatory perspective, the Internet Is treated as mass media 20 and Included 
on the list of telecommunications services regulated by the 2005 Law on Telecommu- 
nications. Azerbaijani law does not provide for mandatory filtering or monitoring of 
Internet content. However, as Web sites that criticize governmental policies have 
emerged, the government has considered Introducing a law that will impose restric- 
tions on Web sites with obscene or antinational content, thereby strengthening 
already existing defamation laws. Content filtering Is practiced by AZNET, the educa- 
tion and research ISP, but Is regulated by an accepted usage policy and Is restricted to 
filtering out pornographic content. Anecdotal accounts claim that filtering of specific 
Web sites occurs, which Is seemingly* the result of Informal requests to ISP managers 
by state officials from the Ministry of National Secunty, MCIT, or the presidency. These 
Instances have been Infrequent, and the resulting public outcry has led to the swift 
unblocking of affected sites. 
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YouTube Is also becoming Increasingly popular among Azerbaijani Internet users. 
Several youth groups are posting videos online and are using YouTube as a platform 
to communicate with other YouTube members or members of the public at large. The 
popularity of the multimedia site prompted the head of the National Council on TV 
and Radio Broadcasting of Azerbaijan, Nushlrevan Magerramlt, to announce the gov- 
ernment's Intention to regulate Internet TV and Internet Radio. 21 

The Telecommunications Act Is expected to prohibit the same legal entity from con- 
centrating more than three publications under one TV and radio company. In 2007, 
the government announced that In some regions of the country, TV signals from 
neighboring Armenia and Iran are stronger than the national TV broadcast. 22 As a 
result, the National Television and Radio Council ordered a discontinuation of the 
broadcast of Russian and Turkish TV stations on Azerbaijani territory. In October 
2008, the council announced Its decision to suspend the licenses of some International 
radio channels, such as the BBC, Radio Liberty, and others. 

The Azerbaijani defamation legislation has been a frequent sub|ect of criticism by 
the International human rights community. The government has been under pressure 
to decriminalize libel, especially after prosecution against journalists and bloggers has 
Intensified. For example, Eynulla Fatullayev, the editor of Azerbaijan's largest inde- 
pendent newspaper and an outspoken critic of the government, was sentenced to eight 
years and six months In prison on charges of terrorism and inciting ethnic hatred. 2 * 
Fatullayev was sentenced earlier during the same year under the criminal libel provi- 
sion to i0 months In prison for a posting attributed to him. The |>ostlng blamed the 
Azerbaijani government for one of the massacres In the Nagorno-Karabakh war in 
1992. 24 Fatullayev denied witting the posting and argued that the charges were politi- 
cally motivated. This case stirred massive protests In the country against the editor’s 
conviction. The authorities shut down the publications in which Fatullayev partici- 
pated. The hard disk drives of the computers of these jwbllcatlons were also seized. 2 * 

Another recent case shows that the government has exercised pressure on ISPs to 
take down specific Internet content Sensitive videos considered offensive to Azerbai- 
jani national feelings were uploaded online to cause a massive uproar In the society. 
In response, the Ministry of Foreign Affairs sent an official letter to the ISP to express 
Its disapproval and have the videos removed. 

Surveillance 

Azerbaijani law does not Include a formal legal foundation requiring Internet surveil- 
lance. Nevertheless, surveillance does occur, mainly by means of sporadic visits of 
the State Security Services to ISPs. In 2000-2001, there was an unsuccessful attempt 
to adopt the Russian SORM-II model for Internet surveillance, but the project was 
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Interrupted because of financial difficulties and opposition from ISPs and the Internet 
community. 

In order to deal with cyber attacks, the MCfT Is planning to establish a council deal- 
ing with Internet-related problems.** The Azerbaijani Internet community Is hoping 
that the proposed council will be able to decrease cyber security risks without under- 
mining the privacy of users. Another recent MCIT Initiative is the launch of an Inter- 
net antihackers agency. 

There are several reported cases of people arrested because of content posted online. 
The author of the Web site http://www.pur.gen.az, Infamous for Its biting humorous 
content, posted a caricature of the president of Azerbaijan in 2006. In 2007, the Min- 
istry of National Security searched one of the Internet caffes in Baku and discovered 
this caricature on the cache page. The author and the webmaster of the site, as well 
as several caffe guests, were arrested and indicted for organized criminal activities. The 
Individuals were released several days later, but the Web site was shut down by Its 
owners in order to avoid further prosecution. 

Another case followed the rapid Increase of the price of petrol, gas, and electricity In 
the country In January 2007. The author of http://www.susmayaq.blz ^, published a 
protest letter to the president online. As a result, the author was arrested, and the 
Web site was temporanly Inaccessible on ten Azerbaijani ISPs from January to March 
2007. 28 After a protest by youth organizations, the author was released without charges. 

ONI Testing Results 

In 2007 and 2008, the OpenNet Initiative tested for content filtering on four ISPs— 
AzNet, DeltaTelecom, AzerOnllne, and AzEuroTel, as well as several end user locations 
(such as Internet cafes). Most of the ISPs In the country purchase International traffic 
from Delta Telecom and utilize the Infrastructure of AzTelecom for local traffic. It 
appears that most of the filtering occurs on Delta Telecom lines. The ONI found reverse 
filtering on a number of U.S. military sites. 

Evidence of second-generation controls was also evident in the run-up to the 2008 
parliamentary elections. The political section of the most popular online forum (http:// 
www.day.az/forum) In Azerbaijan was removed around 20 days before the elections 
and was still Inactive in May 2009. 

The popular opposition Web blog TTnsohbetl.com was blocked in March 2008 after 
It published an article detailing the political and economic problems In Azerbaijan. 
Earlier, In 2006, the same Web site was blocked because It posted satirical cartoons of 
the president. 2 '* Before the presidential elections in October 2008, the Web site was 
unblocked, but by then the original domain registration had expired and no longer 
hosted the opposition Web blog. 
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The autonomous republic of Nakhchlvan, an exclave of Azerbaijan, closed down 
Internet cafes for several days in March 2008, according to the Azerbaijani press.* 0 
The reasons behind the ban remain unclear, but restrictive policies on seeking and 
distributing Information In the republic are not isolated cases. At the end of 2008, a 
number of Web sites were locally blocked In Nakhchlvan. 31 

At the Internet cafe level, many owners Impose restrictions that prevent users from 
downloading large attachments and visiting certain pornographic sites. But these poli- 
cies are not universal, and they are Implemented at the discretion of Internet cafe 
owners. 

At the business level, most employers limit access to the Internet through the use of 
Intelligent firewalls that restrict the downloading of files with certain extensions (.mp3, 
.avl, .mpg. .mov, etc.), as well as access to storage file servers and to the servers of 
Instant messaging clients such as ICQ. MSN, Skype, and others. 

The ongoing cyberwar between Azerbaijani and Armenian hackers has also caused 
disruptions to some Web sites and ISPs. In early 2007, five Armenian Web sites were 
Inaccessible, and users were displayed a block page commenting on the political affil- 
iation of the Nagorno-Karabakh region. 32 At the same time, the Web site of the 
Azerbaijani Public Television 1TV was taken down. 33 Since most of the allegedly Inac- 
cessible sites contained oppositional political content, there are allegations that the 
Azerbaijani government was Involved in the attacks. However, ONI testing could not 
confirm these suspicions. The ONI did not test for jiolitlcal Issues related to the pro- 
claimed independence of the Nagorno-Karabakh region. 34 

Conclusion 

The Internet In Azerbaijan remains for the most part "free and o|>en" as a result of the 
government's strong interest in converting the country into an "1CT hub" for the re- 
gion. However, evidence of second- and third-generation controls Is mounting. As the 
IT market Is not yet fully liberalized, the commercial ISPs operate under economically 
Inconvenient conditions set by the state monopolist, which stifle smaller competitors. 
Government pressure on content providers Is not Isolated and takes d liferent manifes- 
tations ranging from surveillance to the shutting down of commercial activities. 
Instances of "just-ln-tlme’' filtering appeared to result from "Informal" requests by 
state officials to ISP operators and were limited In duration and scope. Moreover, public 
pressure led to a swift reversal of the policies. That said, the filtering requests appear to 
be directed through informal channels. Given the prospect of increased use of the 
Internet by Azerbaijani opposition groups and the government's sensitivity to opposi- 
tion, we may expect to see some attempts to regulate Internet content and further 
instances of “just-ln-tlme" filtering affecting opposition Web sites. 
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Notes 

1. Azerbaijan has signed grant agreements with the UNDP (National Information Communica- 
tion Technologies Strategy for 2003-2012), the World Bank (for expanding telecommunications 
in the rural areas of the Southern Caucasian countries), and otlier international organizations. 

2. Human Right* Watch, "Azerbaijan: Presidential Ejections 2003/ httptfwww.hrw.org/ 
bickgrouisder/ec a/azerbaij an /index, htm. 

3. Transparency International, "Corruption Perceptions Index 2008/’ httptfwww.transparency 
.org/puUcy_res<sirdi/surveysJndices/cpi/2008. 

4. Decree 1146 on tlse Establishment of National Strategy on Information and Communication 
Technologies Aimed at Use Development of the Republic Azerbaijan (2003-2012), signed by Use 
President of the Republic of Azerbaijan on February 17, 2003. 

5. Radio Free Europe/Radio Liberty, "Azerbaijan: RIE/RL Journalist Freed but Faces New 
Charge*/’ December 10, 2007, http: 4 ywww.rferLorg/featuresartide/2007/12AX18a4642-2eS0 413S 
•a8c2* 2 1 bfbe 1 2eefa.html; Radio Free Eurupe/Radio Liberty, "Azerbaijan: Activist Becomes First 
Female Political Prisoner to Die in Detention,” November 29, 2007, httptfwwwjfeiLoxg/ 
foturesartide/2007/ 1 l/6bd 1 aOac-3 lce-4874-bf46-f6d4525ceSca.html. 

6. Two previously active opposition news Web sites, httptf’www.tiroes.az and http:tfwww.kiv.az, 
were bought out by a U.K. media corporation and are no longer supported. 

7. A local nonprofit multimedia center conducts regular monitoring of state Web sites and pro- 
vides information about e- governance services, frequency of Information updates, and accessi- 
bility OittptfVww.informasaya.org/). 

8. ANTV is a product of an initiative of tlie Forum of Azerbaijani Student* In Europe. ANTV 
encourages free speech, video sharing, and discussions using tlse YouTube platform. See httptf 
www.youtube.com/user/vhsoy. 

9. BBC News, "Country Profile: Azerbaijan," April 15, 2009. httptfnew*.bbc.co.uk/2/hi.^europe,/ 
country.profiles/ 1 235976 Jtm. 

10. International Telecommunication Union (ITU). ’Internet Indicators: Subscribers, Users, and 
Broadband Subscribers,” 2008, http:tfVww.itu.int/nU-D/icteye/Reporting/5liowReportrraine.aspx 
7ReportName-/wn/lnfocmationTecluH>kogyPublic&RP_intYear-2008&RP_iritLanguageID- 1 . 

11. Transport, Communication, Information, and Communication Technologies. State Statistical 
Committee of the Republic of Azerbaijan. The latest published data are for 2006; The State Static 
tical Committee of the Republic of Azerbaijan, httptfVww-azstatorg/statirdo/cornmunkatiori/en/ 
042.1. shtml. 

12. Die prefect targets selling more than 100,000 PCs in tlsc country by 2010 and providing 
each Internet user with free Internet hours. Trend . "National PC Project Open for Cooperation: 
Azerbaijani IT Ministry," April 13, 2009, httptfcn.trend.az/capitaJ/it/145S207.html. 
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13. Delta Telecom Inherited the infrastructure of AzerSat with connections to TdiaSonera 
(Sweden) and preserves partnership with Eutelsat, Belgacom, SatGate. XANTlC, Hughes Network 
Systems, Rindatel, Siemens, and Motorola. 

14. Azerphone is expected to cover 85 percent of the territory of the country by 2008, Offering 
lower prices than Use two preexisting operators and 3G technology. TodayAz, "Azerphune Com- 
pany to Cover 85% Territory of Country in Following 2 Yean/' January 17. 2006, httptfwww 
.today. az/news/busmess/ 22 1 28 .htmL 

15. Catel is an entirely CDMA based mobile operator and also provides Internet services. 

16. For operators, it is easier to obtain a license for CDMA services using transportable phone, 
rather tlian for a mobile operator. All CDMA operators provide Internet services, and Useir cover- 
age is mainly in big dties. GPRS services m tlie country are expensive (in the range of IS MB for 
USD 5). 

17. As provided in Presidential Decree No. 861, March 19, 2003. 

18. Diyjiz, "Azerbatdjanskie Internet— Pro vakleri Mogut Okazyvat' Usiugu IP tekfonii" (Azerbai- 
jani Internet— ISPs Can Provide VoIP Services). February 5, 2007, http:tfwww.day az/news/hitech/ 
69561.html 

19. "Pravilami PoPzovaniya Ushiganu Internet Svyazr" (Internet Service Use Rules), www.mincocn 
-gov-az. 

20. Ursder the provisions of the Law on Mass Media adopted on December 7, 1999. 

21. Diyju, Nushirevan Malsarramfa. "Internet -radio i Intemet-TV Dol|ny Regulirovatsya Zako- 
nom u (Internet Radio and Internet TV Should Be Regulated by Law), July 27, 2007, httptfwww 
.day az/news/hitech/87 198.html. 

22. Rt^mrurnuu. 'V Azerbaijane ne Mogut Aaghishif Annyanskie i Iranskie Telekanaly" (In Azer- 
baijan. Armenian and Iranian TV Cannot Be Drowned). January 17, 2008, http://www.regmun.ru/ 
news/944030.htmL 

23. Human Rights Watch, "Azerbaijan: Outspoken Editor Sentenced to Eight Years and Six 
Months," October 29, 2007, http:^hrw.org/english/docs/2007/10/30/azerba 1720t.htm. 

24. Human Rights Watch, "Azerbaijan: Opposition Editor Sentenced to Prison," April 25. 2007, 
http:^hrw.org/engllsh/docs/2007AH/26/azert>a 1 S790.htm. 

25. Several journalists were arrested during the last two years ori different accusations. Six of tliem 
were released, and tliree remain in jail. The last police attack on journalists occurred on June 23, 
2008, when Use leader of the Institute of Freedom and Security of Journalists, Emin Huseynov, 
was arrested wtiile filming a meeting dedicated to Che Guevara's birthday. 

26. Dyji . "V Azerbaijane Sozdaetsya So vet po Resheniyu Problem, Svyazannyh s Intemetom" 
(hi Azerbaijan, a Council to Address the Problems Associated with the Internet). December 24, 
2007, http://www.day.az/news/hitech/ 1023 19 JitxnL 
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27. Hie Web site, in translation from Azerbaijani, bean as its title tlie provocative slogan "Let's 
not be silent." 

28. Day mi. "V Azerbaijane Arestovan Avtor Sajta, Vyrajavsliego Protest Protiv Podnyatiya Tzen" 
Pn Azerbaijan— the Author of a Web site Protesting Price Increases is Arrested), January 15, 2007, 
http://n-ww.day «^news/poht»csy68O40.html. 

29. Tlie site was stiD blocked in July 2008. Reporters Without Borders report on a previous bkxk. 
See Reporten Without Borden, "Blog tiiat Satirizes President Aliev made Inaccessible." July 28, 
2006, http://www.rsf.org/Btog-that-satirizes-President.html. 

30. Day mi. 'V Nahchyvane Vnov* Zarabotali Inteniet-kluby" (Intemetciubs are in Operation 
Again in Valuhivan). March 7. 2008. http:4Ww.day. az/news/hitecii/l 1058t.html. 

31. See http://nakhlntemet.az, http:.OVww.nakhciiivuii.org.az, httpr.OWw.turan^z, httptfwww 
. azadliqradiosu. az. http:4Ww.aradliq.org. httptfwww.iifs.az. 

32. DayMi. "Azerlxiijanskii Maker Vzkwnal Pyat' Annyamkili Sajtov" (Azerbaijan Hacker Breaks 
Five Armenian Web sites), January 29. 2007, http:tfwww.day.az/ncws/hitech/68996.html. 

33. DayMi. "Spetxshijby Armenll Vzlomal Sajt Obshestveiusogo Teieviden'ya Azerbaijana" (Azer- 
baijani Public Television Web sUe Defaced by Armenian Secret Service). January 22, 2007, httptf 
www.day.az/riews/hJtech/68493.html. 

34. In an attempt to improve the hostile relations between Armenia and Azerbaijan, the fast site 
in Armenian was lauisdsed last year In Azerbaijan. The purpose of this site is to inform Armenians 
about tlie real situation in Azerbaijan and Use conflict from an Azeri viewpoint. 



Belarus 


The Belarus government has moved 
to second- and third-generation con- 
trols to manage Its national Informa- 
tion space. Control over the Internet 
Is centralized with the government- 
owned Bel telecom managing the 
country's Internet gateway. Regula- 
tion Is heavy with strong state 
Involvement In the telecommunica- 
tions and media market. Most users 



who post online media practice a degree of self-censorship prompted by fears of 
regulatory prosecution. The political climate Is repressive and opposition leaders 
and Independent journalists are frequently detained and prosecuted. 


Background 

Under President Alexander Lukashenka, the Belarusian regime has been criticized for 
Its repressive and increasingly authoritarian tendencies. In 2008, It was announced 
that Lukashenka would most likely run for a fourth term In 2011. 1 During his rule a 
number of Independent and opposition leaders have been detained, opposition parties 
banned, and public demonstrations suppressed. The economic and political system 
remains highly centralized, with executive authority vested exclusively In the office of 
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1 KEY INDICATORS I 

GDP per capita. PPP (constant 2005 international dollars) 

10,2*8 

L Me expectancy at birth (years) 

70 

literacy rate (percent of peopfe age 15+) 

100 

Human development index (out o f 1 79) 

67 

Rule erf law (out of 211) 

184 

Voice and accountability (out erf 209) 

182 

Democracy index (out of 1 67) 

1 32 (Authoritarian regime) 

Digital opportunity index (out of 181) 

78 

Internet users (percent of popiiation) 

29 


Source by irxfcalor World Bank 2CM09a. World Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economot Inlefigence Unit 2006. ITU 2007, Miniwatb Marketing 


Croup 2009. 

the president. Charges of election fraud have also been widespread. Human rights 
organizations have been extremely critical of the current regime, including Its steadily 
Increasing control over information during the last several years. Nevertheless, Luka- 
shenka remains genuinely popular with many, particularly the middle-aged and rural 
populations who have benefited most from his protectionist economic policies and 
the overall stability that Belarus has en|oyed* (which contrasts with political Instability 
In Ukraine. Georgia, and other CIS countries). Market analysts predict that economic 
hardship will force the privatization of state assets, but such a move would most likely 
benefit top Belarusian officials* 


Internet In Belarus 

Steady economic growth In Belarus has stimulated the development of telecommu- 
nications In recent years. However, because of excessive regulation and state control 
of ma)or participants in the telecommunications Industry, the development of tele- 
communications remains low compared to the rest of the region. The state retains a 
dominant position over the telecommunications sector, with all external fixed-line 
connections passing through the state-owned operator Beltelecom. Taking into ac- 
count both the Increase in Internet users and the potential of the Internet to spread 
political Ideas, the gos'emment Is adopting restrictive policies, monitoring content, 
and placing temporary limitations on access to politically sensitive Web sites, particu- 
larly during times of public protest. 

The cost of Internet access In Belarus has decreased In recent years prompting a 
notable rise In Internet usage and a growing ISP market. As of 2008, Belarus had an 
Internet penetration rate of approximately 29 percent* Prices for Internet access re- 
main higher than those of neighboring countries. In 2008, the cost of dial-up Internet 




access through Beltelecom was around USD 0.68 per hour, while an ADSL connection 
(512 Kbps) cost around USD 122 per month. 4 placing the latter beyond the reach of 
most citizens, given that the average salary was around USD 486 per month as of July 
2008. Private operators are attempting to break Into the market by offering lower prices. 

because Beltelecom controls the market, tariffs for residential local calls are below 
cost. The government Is preserving this policy In order to ensure that fixed voice ser- 
vices are affordable for all.® At the same time, Beltelecom Is keeping prices high for 
International calls and Internet access service, a policy that allows the operator to sub- 
sidize local call services and remain a revenue-generating enterprise. This policy, how- 
ever, hinders the establishment of a competitive market. 

In recent years, broadband Internet services have developed rapidly. Beltelecom has 
announced plans to provide broadband Internet service to a large number of Its sub- 
scribers and to launch Wl-Fl service. In April 2008, the Ministry of Communications 
estimated that 170,000 Internet users were using broadband services and forecast that 
by 2010 this number would reach 500.000 users. 7 

The most active Internet users in Belarus belong to the 17-22 age group (38 percent), 
followed by users In the 23-29 age group* Internet access in Belarus Is predominantly 
urban, with 60 percent of users living In the capital Minsk. The profile of the average 
Internet user Is male, university educated, living in the capital, and working In a state 
enterprise. The Ministry for Statistics and Analysis estimates that one in four families in 
Belarus owns a computer at home* In 2005, 58 percent of schools In Belarus had com- 
puters, and 2S percent of the schools had Internet access. The popularity of Internet 
cafes has fallen In recent years, as most users prefer to access the Internet from home 
or wort Russian Is the most widely used language by Belarusians on the Internet, fol- 
lowed by Belarusian, English, and Polish. 

As Internet usage has risen, related services have developed Into fast-growing and 
profitable businesses In Belarus. According to ministry data, 150 ISPs had licenses to 
operate In the country, while only 41 were active at the beginning of 2008. 10 Con- 
ditional on obtaining a license, ISPs and mobile operators can apparently enter the 
market without facing any serious barriers. Fixed-line operators, however, are awaiting 
further liberalization of the market. There are four mobile operators, and the govern- 
ment owns stakes In all of them. The country's first deputy IT and communications 
minister, Ivan Rak, has announced that the tender for 3G licenses In Belarus would be 
held by September 1. 2009." The state-controlled operator Beltelecom holds the big- 
gest market share, with 187 pubUc Internet access points in the country. Beltelecom's 
subsidiary Belpak Is the main ISP In the country. Beltelecom holds exclusive rights over 
the external channels of communications, 12 and all ISPs are required to run their traffic 
through Its Infrastructure, often at high prices. 

Only the network of the National Academy of Sciences of Belarus (BasNet) has Its 
own Independent satellite connection, 1 * but It provides Internet access exclusively to 
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academic Institutions. In 2008, the speed of Belteleeom's Internal Internet channel 
was significantly Increased to 5.2 Gbps, with prospects to Increase to 8 Gbps in 2010 
(from a mere 1.5 Gbps In 2006). In comparison, BasNet's speed Is 12 Mbps. Beltelecom 
routes Its traffic predominantly through Russian operators (70 percent) to connect to 
the Internet. 14 

Second-tier ISPs haw the right to build their own infrastructure, except for the con- 
struction of external liaison channels. Providers are also required to use Beltelecom 
channels to connect users (so-called last mile). 

Despite the state-proclaimed "liberalization" of the Belarusian mobile market, the 
government continues to own a significant stake in four operators. IS The main ISPs 
In the country apart from the state operator are AKhyna, Bellnfonet, BN, and Solo. 
Because VoIP services are considered International services over which Beltelecom has 
exclusive rights, the state operator Is the only operator licensed to provide commercial 
VoIP services In Belarus. The high prices maintained by the monopoly encourage the 
emergence of illegal VoIP providers, which are criminally prosecuted. Under decree of 
the Ministry’ of Communications and Informatization, IP telephony Is permitted only 
for noncommercial purposes. 16 Regulation of P2P connections Is currently not a prior- 
ity for the government. 

Beltelecom controls the main IXP and charges other ISPs for using it. 17 Nonetheless, 
a large number of second-tier ISPs are using the IXP because It significantly cuts down 
traffic costs. Interconnection tariffs between telecommunications operators are still not 
regulated. 

There are more than 22,300 Belarusian Web sites, of which around 13,500 domain 
names were registered with the country-code top-level domain name ".by" by mld- 
2008. 

Legal and Regulatory Frameworks 

Extensive governmental regulation, a strict licensing regime, and Belteleeom’s mo- 
nopoly are ma|or Impediments to the development of competitive Internet services 
In Belarus. Beltelecom Is under the direct supervision of the Ministry of Communica- 
tions and Informatization. This arrangement could change as a result of the WTO’s 
accession requirements, which demand that Beltelecom be privatized and end Its mo- 
nopoly on external communication channels. The ministry declared that Belteleeom’s 
control over external communication channels would remain after privatization, with 
licenses given only to those operators that have built their own external communi- 
cation infrastructure. Belarusian legislation has established a license-based regime for 
the following types of telecommunications activities: fixed local/natlonal telephony, 
mobile telephony, radio trunk transmission, and data transmission. 1 * 



The Ministry of Communications and Informatization is the main regulatory au- 
thority of the telecommunications sector and Is divided into six main departments: 
statistics, telecommunications, postal communications, television and broadcasting, 
certification, and technical regulation and standardization. The ministry is frequently 
accused of placing un|ustlfied limitations on commercial operators to reinforce Beltele- 
com's monopoly. The ministry is a founder of Beltelecom and regulates the activities of 
the operator. This setup undermines regulatory Independence, a principle essential for 
the efficient functioning of the communications sector. Policy relating to ICT appears 
to be created mostly on an ad hoc basis by President Lukashenka and his administra- 
tion. The president frequently holds special meetings to Issue directives regarding ICT 
regulation and the Implementation of particular policies. The Security Council, chaired 
by the president, decides on a wide range of questions related to the security of the 
regime, including information security. Additionally, a number of state entitles have 
significant power to Influence and control the Internet. The Operational Analytics 
Center (formerly the State Center for Information Security), under the supervision 
of the president and initially a subdivision of the special security services (KGB), is a 
specialized body responsible for protecting state secrets. The center has preserved its 
close collaboration with the KGB. The center also manages the administration of the 
country’s top-level domain (".by')- The State Inspection on Electronic Communica- 
tions is a subunit of the Ministry of Communications and Informatization and exer- 
cises wide authority with regard to the Internet. The Inspection supervises the 
electronic communications sector, and in the event of a violation of the rules, it can 
Impose sanctions on operators or propose the revocation of a wrongdoer's license. 

Department "K"— a division of the Ministry of Internal Affairs— is responsible for 
Investigating cyber crime (arts. 212, 349-355 of the Penal Code). The department coor- 
dinates its work with the police and other authontles. Department "K" keeps 1,500 
Belarusian hackers on its records. Records show that 4,642 criminal cases related to 
usage of computer technologies commenced in the period of 1998 to 2006, of which 
2,826 were registered in 2005. Belarus has witnessed a rapid growth of cyber crimes, 
and authorities have estimated a 30 percent increase for the first half of 2007 in com- 
parison to the whole of the previous year.** The most common cyber crimes In the 
country are unauthorized appropriation of information through usage of computer 
technology (72 percent) and modification of computer Information (13 percent). 20 

Although Belarus lacks a well-developed Internet regulatory framework, the author- 
ities appear anxious to achieve control over the Internet. Conscious of the popularity 
of the Internet among opposition groups and private media, authorities compel self- 
censorship through frequent threats and prosecutions. In addition, in order to avoid 
public debate of pending legal measures, authorities often delay publishing laws before 
their final promulgation. 



A number of laws refer to the Internet, such as the Law on Informatization of 1995, 21 
the Law on SORM of 1999, 22 and the Law on Electronic Communications of 200S. 25 
The Internet Is within the ambit of regulation of the Law on Informatization, which 
subjects Internet activities to a number of media restrictions. The Law on the Media 
of June 2008 provides a similar regime for Web sites and media. The legal framework 
allows for the application of restrictive measures on Web sites, such as blocking of con- 
tent or the cessation of operation. This Is a result of Increasing Intent on the part of a 
number of state officials to control the Internet. 

In 2006, the government approved the Program on Protection of Information. The 
main objective of this program Is to prevent illegal access to Information by the special 
services, to protect Information systems, and to counteract excessive Investigative mea- 
sures. A new center was created In support of this program, but many activists have 
questioned Its Independence and effectiveness. 24 

E-commerce Is also regulated by the state. All Internet retailers are legally obligated 
to register domain names with the State Center of Information Security, as well as to 
obtain a license for retail trade by e-commerce activities. International electronic 
payment systems are seriously limited In Belarus. All international monetary transfers 
must occur through banks that notify the tax authorities of all fund transfers from 
abroad. 


Surveillance 

Officially, Internet filtering and monitoring of telecommunications networks are Illegal 
In Belarus. However, authorities conduct surveillance of Internet activities under the 
pretext of protecting national security. In 2001, the president extended the concept 
of “national security" to Include the Internet as a potential threat to the Information 
security of the country. 24 

Under the Law on Operational and Investigative Activities (SORM) and the Law on 
Authorities of National Security In the Republic of Belarus, the Ministry of Internal 
Affairs and the KGB have the right to monitor Information carried through any com- 
munication channel In order to "fight criminal activity" and "guarantee national secu- 
rity." 2 * Such activity- may be carried out only as provided for In the law; however, the 
law gives the KGB the right to obtain any data from state entitles and from private or 
public organizations considered to be "necessary" for accomplishing the KGB's objec- 
tives, and gives It unlimited access to the Information systems and databases (Includ- 
ing log files and so on) of communication providers. Artlde 17 of SORM establishes 
that all persons who are providing any type of electronic communications services 
should Integrate additional certified equipment and program mechanisms into their 
systems, as specified by the KGB. 
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Belarus does not have systems monitoring Internet traffic analogous to the Russian 
SORM-0. However, It Is likely that the Belarusian and Russian special services cooperate 
In this sphere. More than 70 percent of Belarusian Internet traffic goes through Russia, 
and part of It is processed through the Russian system SORM-2. Nonetheless, some pro- 
ciders confirm that the authorities have unofficially requested that all user IDs be kept 
for a few months and be turned over to the security services on demand. 

On November 21, 2005, the leader of one of the opposition parties (Anatoliy 
Lebedko) was called to the prosecutor's office In relation to material published on his 
party’s Web site (ucpb.org). 2 ' Lebedko was subsequently Interrogated about the source 
of the Information posted online and the person responsible for the article's content. 
Such examples of surveillance over Internet activities are not Isolated. 

ONI Testing Results 

In 2007 and 2008, the ONI tested seven main ISPs: Atlant, Alchyna. BASNET. Bellnfo- 
net, Belpak (Beltelecom), BN, and Solo. The testing confirmed blocking by almost 
all ISPs. Many Web sites tested on the academic network BASNET were Inaccessible 
In Belarus, among which were opposition Web sites and local and global fieedom-of- 
expresslon Web sites. Including a number of Web sites of international organizations, 
some dedicated to Belarus. International social networking, hosting, e-mail, P2P, and 
translation and multimedia Web sites were also filtered on BASNET. In addition to 
Web sites containing information on drug and alcohol consumption, as well as terror- 
ist activities. Anonymizer Web sites were blocked on commercial ISPs and on the aca- 
demic network. Several LGBTQ Web sites have been filtered openly since the 
beginning of 2005, on the basis that they contain pornographic material. 28 Interest- 
ingly, these Web sites were Inaccessible on some ISPs but accessible on the state-owned 
Beltelecom. Some erotic Web sites were Mocked as well. Access to U.S. military Web 
sites appears to be restricted through reverse filtering. 29 

Since April 2008, an association focused on promoting freedom of expression among 
ISPs has started gaining popularity In Belarus. 30 Nonetheless, most of the large opera- 
tors are limiting access to the Internet when necessary to serve specific objectives. A 
study carried out In the spring of 2008 complied a list of Web sites that are currently 
blocked by Belarusian companies. The results of this local survey are presented In the 
following table. 11 

Internet access Is forbidden in military and national security agencies, as well as in 
the banking sector. Beltelecom's monopoly control over international connections 
provides the state with an effective and enforceable system for regulating and restrict- 
ing Internet traffic. During presidential elections, access to opposition and Indepen- 
dent media Web sites was temporarily blocked. During the February 2006 presidential 
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elections, ONI documented second-generation techniques, Including "|ust-ln-ame" fil- 
tering of opposition Web sites, which included DNS tampering, network disconnec- 
tion, and allegations of DoS attacks. 32 Some specialists have suggested that, during 
presidential elections, Beltelecom established so-called traffic-shaping practices — that 
Is, deliberately slowing down access to specific IP addresses. Beltelecom allegedly 
received special requests from authontles to block certain Web sites for a limited period 
of time. 

Self-censorship by Internet users has become a pervasive phenomenon. In 200S, the 
popular Belarusian portal tut. by refused to put up banners advertising opposition Web 
sites. It Is unknown whether this activity was a result of pressure by the authorities or 
merely an attempt to protect Its own business. 33 

Researchers at ONI confirmed that most Internet cafes restrict access to Web sites 
containing pornographic, terrorist, and proxy-related material. Internet cafe install 
software that either blocks URLs In the list of forbidden Web sites or alerts the admin- 
istrator If such a URL Is visited. The restricted URL list Includes Web sites forbidden for 
dlstnbutlon by the Republic Committee on Prevention of Pornography, Violence, and 
Cruelty Propaganda. Administrators often require passport Identification of customers. 
Some Internet cafes also limit the volume of Internet traffic and decrease download 
speeds when exceeded. On the request of state security services, administrators keep 
logs of users' network activity. 

Conclusion 

As Internet use In Belarus has risen significantly In recent years, the government Is 
Intent on extending Its firm control over the national Information space. The level of 
online piracy In the country Is very high, but the government does not adequately 









confront such activity. Instead, It heavily regulates market participants and Is taking a 
sluggish approach to technological Innovation. All ISPs In Belarus must connect to the 
Internet through channels of the state-owned ISP Beltelecom, thus facilitating the gov- 
ernment's control over all Internet traffic. The president has established a strong and 
elaborate Information security policy and has declared his intention to exercise strict 
control over the Internet under the pretext of national security. Based on periodic test- 
ing, ONI has detected sporadic but sophisticated blocking of Internet content, 
prompted by political events in the country, suggesting that the regime Is Inclined 
toward using second- and third-generation techniques. 
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Georgia 


Access lo Internet content In Georgia 
Is largely unrestricted as the legal con- 
stitutional framework, developed after 
the 2003 Rose Revolution, established 
a series of provisions that should. In 
theory, curtail any attempts by the 
state to censor the Internet. At the 
same time, these legal Instruments 
have not been sufficient to prevent 
limited filtering. The ONI detected fil- 
tering on corporate and educational networks. Evidence also shows that Internet 
cafes limit access to some download sites (reportedly to conserve bandwidth and 
cut down on costs). During the Russla-Georgla war of August 2008, Georgian ISPs 
systematically filtered Russian Internet content. Georgian end users were also af- 
fected by the March 2008 blocking of YouTube by Turkish Telecom. Internet pen- 
etration remains low despite a liberal telecom market and comparatively 
moderate service prices, and It Is Influenced by an unstable political climate that 
has discouraged Investment. 



Background 

Since 2003, Georgia has been governed by the reformist administration of President 
Mlkhell Saakashvili, who came to power In the wake of the Rose Revolution. During 
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1 KEY INDICATORS [| 

COP per capita, PPP (constant 2005 international dollars) 

4,403 

Life expectancy at birth (years) 

71 

Literacy rate (percent of people age 15+) 

100 

Human development index (out c4 1 79) 

93 

Rule erf law (out of 211) 

120 

Voice and accountability (out of 209) 

120 

Democracy index (out of 167) 

104 (Hybrid Regime) 

Digital opportunity index (out of 1 81 ) 

88 

Internet users (percent of popciation) 

7.8 


Source by Irxfcator World Bank 2009a, Work) Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economist Intelgence Unit 2006, ITU 2007, MMwatts Marketing 
Croup 2009. 


this time, the government implemented tax reforms and liberalized the economy. 
These measures resulted In significant foreign Investment, Including investments 
from neighboring Russia and Kazakhstan. Georgia’s strategic position makes the coun- 
try an Important route for the oil and gas pipelines connecting the Caspian Sea with 
the West— one of which Is the strategic Baku-Tblllsl-Ceyhan (BTC) pipeline.' The 
country's unemployment rate Is high (12.6 percent), with more than a million Geor- 
gians living outside the country. 

Georgia has demonstrated a clear commitment to reform its economic and regula- 
tory environment by enhancing transparency and efficiency as a means to improve 
the business climate. These reforms have positioned the country among the world 
leaders In the "ease of doing business" Index prepared by the World Bank. 2 Georgia 
has also surpassed other CIS countries by obtaining the highest level of compliance 
with International standards with regard to Its telecommunications sector. 3 

In August 2008, Georgia and Russia were embroiled In an armed conflict in South 
Ossetia (a semi-autonomous breakaway region bordering Russia). Georgia’s strained 
relations with Russia have Important economic and political consequences for the 
country's future. 

Internet Infrastructure 

In 2007, the government initiated a liberalization of the radio and television industry. 
This effort resulted In an Increase In the number of Independent newspapers and cable 
TV channels, several dozen of which now operate In the country. The state retains con- 
trolling interest In a number of key television stations, which has led to some criticism 
from International observers. Such criticism was especially apparent following the gov- 
ernment’s decision to revoke the license of Imedl — a major private TV channel which 
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was strongly aligned with opposition parties.* This and ocher unilateral acts by the 
government have led to accusations that the administration Is attempting to exert 
Influence over the Independent media. 5 

The fixed-line telecommunications network in Georgia remains outdated and Is 
In need of significant investment. The network has very limited coverage outside 
Tbilisi— Georgia's capital— but even inside the capital the quality of telecommunica- 
tions varies greatly. In urban areas, there are around 20 lines per 100 Inhabitants, but 
In rural areas there are only around four lines per 1,000 Inhabitants. At the same time, 
the number of fixed-line customers dropped In 2006 to 553,000, compared to their 
level in 2004 (596,000)." In 2005, the main telecommunications operator, Georgian 
Telecom, was privatized. There are currently three mobile phone operators in the coun- 
try: Geocdl (TellaSonera). MagUCom, and Beeline (VlmpelCom). 

The Internet emerged In Georgia In 1994 as an ofl-llne e-mail service. By 1996, Sanet 
Networks (one of the early Georgian ISPs) attracted U.S. financial support and was the 
first entity in Georgia to provide full Internet services. In 1997, four more companies 
started to provide Internet services using dial-up technology. In 2002, ADSL services 
were Introduced Into the market. 

During the 2000-2007 period, revenues earned by Internet operators Increased from 
3.7 million Georgian lari (GEL) to 42.S million.' In 2006, their combined annual prof- 
its increased by 32 percent. Within the telecommunications market, the Internet Is the 
second fastest growing segment after mobile services. Georgian sources estimate that 
by the end of 2007 the total number of Internet users of ADSL technologies went 
beyond 41,000* 

In 2006, a Kazakh Investor acquired the state-owned telecom operator and estab- 
lished United Georgian Telecom (UGT). This operator is the owner of the cable infra- 
structure in the country, which It leases to other ISPs. Using Its monopoly position, 
UGT charges higher rents on access to Its network. Moreover. UGT frequently rejects 
requests by some ISPs to Install or terminate their fiber-optic lines at UGT operated 
facilities and charges a fee for each DSL user. 

In 2006, three of the largest ISPs on the market— Georgia Online. Sanet, and Cau- 
casus Networks — merged to form Georgia’s largest ISP, Caucasus Online. The company 
Is the Internet market monopolist providing service to more than 80 percent of the 
population. Caucasus Online has begun laying down Its own fiber-optic metropolitan 
network In Tbilisi. This development should lessen the dependence on the main fixed- 
line operator, UGT, which leases the underground right-of-ways that carry cable to 
Caucasus Online for USD 1 10 per kilometer. 

A major countrywide survey on Internet use has not been canted out In Georgia. 
Consequently, reliable statistics on average Internet use are unavailable. However. Iso- 
lated evidence can be gathered through small-scale surveys. Based on these sources. It 
Is estimated that In 2008 there were approximately 360,000 Internet users In Georgia, 
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which represents 7.8 percent of the population. 9 The majority of Georgian Internet 
users are under 30 years of age. 

The languages most commonly used among Georgian Internet users are English (90 
percent), Russian (8 percent), and Georgian (2 percent). It Is estimated that SO percent 
of users access the Internet from their workplace, 40 percent from their homes, and 
10 percent from other places (such as schools, universities, Internet cafes, and mobile 
networks). The monthly price of ADSL varies from USD 20 to USD 200 depending 
largely on bandwidth. The local backbone connection varies from 3 to 20 Mbps. Inter- 
net service Is usually available In urban areas, with around 80 percent of the services 
provided in Tbilisi. 

The Georgian market for Internet services consists of the following companies: Cau- 
casus Online (covering 80 percent of the market), UGT (10-15 percent), and others 
that make up a combined S percent share of the market (Geonet. Service Net, Egrtsl, 
Maximal! [WlMAX provider), Magtl, Geocell, and Beeline). Magtl signed a contract 
with the Ministry of Education and Science of Georgia to connect 2,000 public schools 
(Including schools in rural and hlgh-mountaln areas) to the Internet by the end of 
2011. Ibis will contribute to the growth of country’s Internet audience, with approxi- 
mately 700,000 new users. Georgian Research and Educational Networks Association 
(GRENA) Is a noncommercial ISP that provides Internet access to academic and educa- 
tional institutions. The market Is open for foreign ISPs. At the end of 2008, Caucasus 
Online established a new fiber-optic channel, which goes from Tbilisi to Potl and 
through the Black Sea to Bulgaria and Romania, and connects to Cogent. The new 
channel gave Caucasus Online the ability to offer speeds up to 20 Mbps. Other ISPs 
route their commercial traffic through Turkey 1 via Turk Telecom, Sweden via Baku, and 
Rostelecom via Novorosllsk. 

All mlnlstnes and almost all government agencies have Web sites. The number of 
blogs Is rapidly rising In the country, mainly among young people. No blogs are sup- 
ported by opposition parties. 

Legal and Regulatory Framework 

The Constitution of August 24, 1995, 10 enshrines freedom of expression and freedom 
of Information. The pnmary legislation that regulates the electronic communications 
sector Is the Law on Electronic Communications No. 1514 of June 6, 2005." 

The law establishes the principles for development of a competitive environment 
In the communications sector; specifies the rights and obligations of persons owning, 
using, or providing services by means of electronic communications networks and 
facilities; and defines the scope of competence of the national regulatory authority In 
the sector — the Georgian National Communications Commission (herein referred to 
as the Commission). The provisions of the law step up the process of liberalization 
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of the electronic communications market by (a) introducing a simple system of general 
authorization instead of an Individual licensing regime; (b) Identifying operators hav- 
ing significant market power in order to prevent the abuse of power and determining 
the usage of methodological approaches when carrying out competition analysis on the 
market segments; (c) recognizing principles of convergence and technological neutral- 
ity; and (d) setting out a sanctions regime In the event of violations of the legislation or 
the Commission's decisions. Articles 41 and 42 of the law establish the procedures for 
dealing with Interconnection disputes. 

The government has also Implemented a strategic program for ensuring the de- 
centralization of power In the regions, furthering transparency of governance, and 
promoting 1CT for maintaining sustainable democracy In the country. The 1CT devel- 
opment framework program has been elaborated under the Initiative of the govern- 
ment and the Commission with the support of the UNDP and the World Bank. With 
Its program for 2004-2009, the government has recognized that the development 
of the telecommunications sector and of the information society constitutes a main 
priority for the country's strategic economic development. One of the main objectives 
of the program Is to overcome the uneven urban/rural coverage as communication sys- 
tem operators and service providers focus mainly on the big cities and settlements with 
little Interest In developing networks for rural areas. As part of the National Strategy for 
1CT Development, among others, the government plans on creating a single Informa- 
tion and communication network with Integrated services, expanding the telephone 
network and transfer to digital systems, converting to digital TV-radlo broadcasting, 
and Increasing Internet usage among the population. 

The Ministry of Economic Development, In particular Its Telecommunications and 
Information Technology Department, sets out the government policy In the electronic 
communications sector and Is responsible for monitoring communications and 1CT 
policy implementation. The sector regulator, the Commission, was established on 
July 1, 2000. The Commission members are appointed for a period of six years by the 
president, a fact which may affect their political Independence. Otherwise, the Com- 
mission Is not financed by the state budget, and Its source of revenue consists of the 
license and regulation fees It collects from licensees. The Commission regulates legal, 
technical, and economic issues on Interconnection among telecommunications net- 
work operators. Other statutes providing for the Commission's regulatory authority 
are the Georgian Law on Broadcasting 12 and the Law on Independent Regulating 
Authorities. 11 

The regulations of the Commission promote innovation In the communications 
service sector, for example, by easing the procedures when consumers bring disputes 
against operators and forbidding suspensions of service In the event of a dispute. 1 * 
Other decisions 15 revise the legal regime to guarantee a consumer's rights with regard 
to the protection of personal Information, higher accountability and responsibilities of 



Georgia 


178 


the operators, effective complaint procedures, and better service. The Commission 
plans to expand the market of broadband communications service to ensure competi- 
tion In local access networks. In order to decrease bandwidth rates and to promote 
VoIP technologies. 

Any activity In the telecommunication sector in Georgia requires proper authoriza- 
tion. 16 In order to obtain an authorization, 17 the operator must register with the Com- 
mission and provide the required company Information and type of services it intends 
to offer. Receiving authorization Is not a burdensome process, with 2S ISPs receiving 
authorization to operate In 2007 alone. 18 To ensure compliance with active legislation, 
the Commission exerts direct control over the activities of operators In the electronic 
communications sector. 19 

According to Article 24 of Georgia's Constitution, any person has the right to receive 
and disseminate Information In writing or any other form. Media restrictions and cen- 
sorship are prohibited. The rights provided for In Article 24 may be restricted by law 
only to the extent needed to ensure the state’s security and territorial Integrity, prevent 
cilmes, protect the rights and dignity of Individuals, prevent the dissemination of 
Information that has been considered confidential, or ensure the Independence and 
Impartiality of justice. Furthermore, the principle of freedom to disseminate Informa- 
tion Is also enshrined In Article 13 of the Criminal Code of Georgia. 

The Law on Freedom of Speech and Expression of 2004“’ elaborates on the content 
of freedom of expression originally enshrined In the Constitution. This law also details 
the narrow circumstances under which freedom of speech and expression may be 
restricted. 

Internet Filtering during the 2008 Russla-Georgla War 

Despite the existence of legal safeguards that prohibit Internet censorship, the August 
2008 conflict between Russia and Georgia witnessed unprecedented censorship of 
Russian Web sites by Georgian ISPs. According to Georgian sources Interviewed by the 
ONI, Georgian ISPs filtered access to Russian media Web sites In the ".ru" domain to 
prevent the dissemination of what was described as "Inaccurate and Inflammatory 
reports by the Russian media." 21 Whether these actions were legal under Georgia law 
has not been adequately determined. From a factual perspective. President Saakashvili 
declared a state-of-emergency based on Article 46 of the Constitution during the onset 
of the conflict. As required by Georgian law, his decision was approved by Parliament 
within 48 hours. Consequently, media rights and freedom of expression were tempo- 
rarily restricted in line with Article 46(2) of the Georgian Constitution. The law does 
not explicitly cover the Internet, however, at least two Georgian ISPs Implemented 
limited filtering aimed at "protecting the population" during the state-of-emergency. 
ONI testing confirmed this filtering had occurred. One of the two ISPs, the GRENA, 
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connects many of the country's schools. Its director claimed that the decision to filter 
content on the GRENA was taken by Its leadership, and not a result of any government 
orders or pressure. Filtering was also detected on Caucasus Online, the largest ISP in the 
country. 

During the conflict, Georgian authorities alleged that the Russian government 
supported DoS attacks by Russian hackers and cyber criminals against Georgian ISPs 
and Web sites. An Investigation carried out by the Information Warfare Monitor, a sis- 
ter pro|ect of the ONI, detected attacks against a variety of Georgian Internet resources. 
Including Web sites belonging to the government, media, blogs, and Internet forums. 
This cyberwar received significant attention In the Western media, which implied 
Russian government involvement, noting that the cyber attacks occurred at the same 
time as Russian troops crossed the border and deployed In South Ossetia. In the after- 
math of the conflict. Independent experts did not find conclusive evidence that the 
Russian government was directly involved In planning or carrying out cyber attacks 
on Georgia. At the same time. It Is clear that the Russian government did little to 
curtail the activity of pro-government hackers and activists who used Russian online 
forums and Web sites to coordinate denlal-of-servlce attacks against Georgian Web sites 
and Internet Infrastructure. 2 * 

Surveillance 

Article 20 of the Constitution of Georgia provides for the Inviolability of private 
records, correspondence, and telephone and other kinds of communications con- 
ducted through technical means. These rights can be restricted only with an appropri- 
ate court warrant, except for urgent cases as provided In certain statutes. Government 
authorities have been reported to engage in the conduct of targeted and selective sur- 
veillance. Allegations In the press point to illegal surveillance that Is said to Include 
Interception of mobile phones, landline phones, and e-malls. 

ONI Testing Results 

Despite existing legal restrictions, filtering and monitoring of the Internet has been 
documented at Georgian ISPs. Evidence of filtering has also been documented on 
academic networks. In addition to the blocking of Web sites during the conflict with 
Russia in August 2008, the media reported that some Russian sites hosted on ".ru" 
were blocked again after the state-of-emergency was lifted. 2! 

Limited cases of filtering In Georgia were detected by ONI. Over the course of several 
months during 2007 and 2008, ONI tested the main ISPs: Caucasus Online, GRENA, 
and Iberlapac. Several International gambling sites are filtered by most Georgian ISPs. 
In addition, a global blogging site has been blocked. Sporadic filtering has also been 
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observed on GRENA, where Web sites carrying pornography and drug, violence, and 
hate speech ate actively blocked. 2 * 

Commercial entitles and public organizations filter some content mainly as a way of 
reducing Internet traffic. Often, online gaming services and Instant messaging services 
are also affected. Researchers for ONI have observed that. In some Internet cafes, lim- 
ited access to bandwidth Is the result of Intensive downloading. 

Georgia Is also subject to upstream filtering. The main Georgian ISP buys Its inter- 
national connectivity from Turk Telecom. Consequently, the access ban Imposed by 
Turk Telecom to YouTube in March 2008 caused a temporary blocking of the popular 
video-sharing site In Georgia. 

Conclusion 

At present. Internet filtering In Georgia appears to be limited to corporate and educa- 
tional networks. With the exception of the Russla-Georgla war, which witnessed lim- 
ited state-sanctioned filtering of Russian Internet resources, access to Internet content 
remains largely unfettered. Georgia's dependence on international connectivity makes 
It vulnerable to upstream filtering, evident In the March 2008 blocking of YouTube by- 
Turk Telecom. It Is unlikely that the government would look to Impose further controls 
over Internet content (or force ISPs to do so) given Its strong public desire to forge 
stronger links with NATO, the European Union, and the United States. 

Notes 
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mote recently, the United States. 

2. World Bank. "Doing Business." http:ffwww.douigbuslness.org/EcunuinyPjtikmgs. 

3. European Bank for Reconstruction and Development. Tdeummnmicatiom Auasmcnl 2008. 
http://www.ebrd.corn/country/sector/law/telecorns/assesa/lndex.htm. 

*. BBC News. "Georgia Country Profile." August 10, 2009. hUpiffnews.bbc.co.uk/ 1/hi/world/ 
europe/country.. profiles/ 1 102477-Stm. 

5. Economist Intelligence Unit. "Georgia Country Profile." 2009. http:ffstore.eiu.com/country/ 
GE.html’ref-lef_nav. 
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11. Hie Law of Georgia on Electronic Communications. June 6, 2005, No. 1514, httptfwww 
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12. Law of Georgia on Broadcasting. December 23, 2004, No. 780 RS, http:tfwww.ixirbament.ge/ 
index. php?langJd-*ENG&sec_id~69&info_id-» 1 6067. 

13. Law of Georgia on Independent Regulating Authorities, September 13, 2002, No. 1666— IS. 

14. GNCC Resolution No. 3 of 2006: On Approval of Regulations on Service Providing and Protec- 
tion of Consumers' Rights in tlie Sphere of Electronic Communications. 

15. GNCC Resolution No. 8 of 2006: On Amendments to tlie Regulations for Service Providing 
and Consumers Rights Protection in the Sphere of Electronic Communications; GNCC Resolution 
No. 7 and No. 9 of 2007: On Introducing Changes and Amendments to tlie Resolution No. 3 of 
March 17, 2006, On Approval of the Rules and Regulations (Regulation) foe Providing Services 
and Protecting Customer Rights in the Sphere of Electronic Communications. 

16. live Law of Georgia on Electronic Communications, Chapter III, "Authorization of Under- 
takings in tlie Electronic Communications Sector General Rights and Obligations of Autliocized 
Undertakings." 

17. Hie Law of Georgia on Electronic Communications. Article 2(i). 

18. Hie ISPs need to provide tlie necessary information to the Commission related to their activ- 
ities. according to Use law of Georgia on Electronic Communications, Article 19(2). 

19. Hie Law of Georgia on the Control of Entrepreneurial Activity, Art. 3.1. 

20. Hie Law on Freedom of Speech and Expression, June 24. 2004, No. 220-RS. httptfwww 
.parijam«itget'ixulcx.php?lang id-GEO&sec >d-69&kan det-det&kaxi id-72. 

21. For more information on the cyberwar conflict refer to Information Warfare Monitor (httptf 
www.inf6war-morutoc.net). which followed and analyzed the development of events. 

22. Ibid. 

23. Lenta ju. "V Gruzii vnov Zablokirovan Dostup k Rynety" (In Georgia Access to tlie RuNet lias 
been Blocked Again). September 10, 2008, http:A0enta.nl/news/2008W/10/notopen/. 

24. Blacklists are mainly maintained using Squid Guard lists. 




Kazakhstan 


The Kazakh government has extended 
Its control over the Internet, even as It 
seeks to liberalize the telecommunica- 
tions market and position Itself as a 
major IT power In the region. The 
state uses Its significant regulatory 
authority to ensure that all Internet 
traffic passes through Infrastructure 
controlled by the dominant telecom- 
munications provider KazakhTelecom. 





Selective content filtering Is widely used, and second- and third-generation con- 
trol strategies are evident. Independent media and bloggers reportedly practice 
self -censorship for fear of government reprisal. 


Background 

Kazakhstan has taken an authoritarian turn under the rule of President Nazarbayev, 
who has served as head of state since national Independence In 1991. Nazarbayev Is 
widely alleged to have manipulated results of elections and suppressed opposition to 
remain in power. 1 Although press freedom Is enshrined In the Constitution, the gov- 
ernment controls mass media outlets and exerts Influence over most printing and dis- 
tribution establishments. 2 Anecdotal evidence points to online media and bloggers 
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1 KEY INDICATORS 

COP per capita, PPP (constant 2005 international dollars) 

10,259 

Life expectancy at birth (years) 

66 

Literacy rate (percent of people age 15+) 

100 

Human development index (out c4 1 79) 

71 

Rule erf law (out of 211) 

160 

Voice and accountability (out of 209) 

171 

Democracy index (out of 1 67) 

127 (Authoritarian regime) 

Digital opportunity index (out of 181) 

94 

Internet users (percent of popxiaticn) 

12.4 


Source by Irxfcdtcr World Bank 2009a, World Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economist InleBgence Unit 2008, ITU 2007, MMwatb Marketing 
Croup 2009. 


practicing self-censorship for fear of prosecution by the state under highly restrictive 
defamation laws. 

Pressed by growing domestic discontent and International criticism. President Nazar- 
bayev agreed to a constitutional reform. In May 2007, the Parliament adopted amend- 
ments to the Constitution, including cutting the presidential mandate from seven to 
five years and increasing the role of Parliament. These changes are not expected 
to enter Into force until the next presidential elections in 2012. The proposed reforms 
remove restrictions on how many terms a head of state may serve. Consequently, Pres- 
ident Nazarbayev can stay In power Indefinitely. 

Internet In Kazakhstan 

The Kazakh Internet community Is growing rapidly. Between 2001 and 200S, the 
number of Internet users Increased from 200,000 to 1 million. By 2007, Kazakhstan 
reported Internet penetration levels of 8.S percent, rising to 12.4 percent In 2008.* 
The National Statistical Agency reports that 73 percent of users access the Internet by 
dial-up, IS percent by means of ADSL, and 6 percent using satellite access. Over SO per- 
cent of users accessed the Internet from home In 2008* Forty-two percent of families 
living In towns with populations of at least 70,000 people have a personal computer. 
KazakhTelekom (KI) reported an Increase In Its broadband subscriber base from 
270,000 to 456,000 In 2008. 4 Despite these increases. Internet usage Is concentrated 
In urban centers, while outside those centers access remains beyond the reach of most 
Kazakhs. 6 

The official language In the country is Kazakh, spoken by 64 percent of the popula- 
tion. Russian, spoken by 9S percent. Is recognized as the official language of inter- 
national communication. Russian Is the most popular language used on the Internet 
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(94.1 percent), followed by Kazakh (4.S percent), and English (1.4 percent), a figure 
which may account for the high percentage of Kazakh Web sites hosted in Russia 
(including those on the country -code domain name ".k z"). Six percent of ".kz” do- 
main Web sites are hosted In Kazakhstan, with the remainder hosted in Russia and 
elsewhere. 

The cost of Internet access remains high relative to the average salary (54,SOO tenge 
in 2008, or USD 363). 7 KazakhTelecom's tariffs for unlimited ADSL access with capacity 
of 128 Kbps were USD 30. However, as a result of the ongoing liberalization in the tele- 
communications sector In 2007, the operators' tariffs fell considerably. Since 2007, 
schools In Kazakhstan are provided with free dial-up access, which Is being expanded 
to include broadband connections (although access Is restricted to Web sites and other 
Internet resources within the ".kz" domain).* 

Liberalization of the telecommunications market In 2004 increased competition 
among the five licensed operators: KazakhTelecom (the former state monopoly, now 
with SI percent state participation). Transtelecom, Kaztranscom. Arna (DUCAT), and 
Astel. The first-tier ISPs with International Internet connections and their own infra- 
structure are KazakhTelecom, Nursat. Transtelecom, Kaztranscom, Arna, Astel, and 
TNS Plus. There are approximately 100 second-tier ISPs that are purchasing Internet 
traffic from the first-tier ISPs. Market liberalization has not been completely carried 
out, as there are restrictions on foreign ownership for fixed-Une operators providing 
long-distance and international services. In addition, KazakhTelecom retains domi- 
nance over the telecommunications market, making It difficult for other operators to 
compete. 9 

One of the largest ISPs, Arna (DUCAT), accused KazakhTelecom of breaching the 
Law for Promoting Competition and Limiting Monopolist Activities. Arna claimed 
that KazakhTelecom used uncertified systems that monitor and Interfere with the tele- 
communications of customers who are using services offered by competing companies. 
An Investigation of the Kazakh government revealed that such systems indeed existed 
and were used by KazakhTelecom, but no evidence was found to prove KazakhTelecom 
was Intentionally Interfering with competitor activities. 

KazakhTelecom Is the operator of the national data transfer network which con- 
nects the major cities of Kazakhstan with a total bandwidth of 9S7 Mbps' 0 and car- 
rying capacity in separate local segments of up to 10 Gbps." KazakhTelecom had 
about 2.5 million fixed-Une subscnbers in 2005 and accounted for approximately 
90 percent of the country's fixed-line market. It also controls 49 percent of the coun- 
try’s leading mobile operator, GSM Kazakhstan, and SO percent of another cellular 
operator. Altel. 12 KazakhTelecom is also launching an interactive IP TV service, as It 
attempts to maintain its dominance In the fixed-line market. 13 Other leading first-tier 
ISPs, Nursat and Astel, operate terrestrial and satellite-based infrastructure. There are 
five mobile operators In the country. Three operators are offering GSM services and 
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two CDMA. The government estimates that 60 percent of the population uses mobile 
services. 

Legal and Regulatory Frameworks 

The Kazakh government exhibits an ambiguous and at times contradictory approach 
to the Internet. The long-term development strategy of Kazakhstan for 2030 14 demon- 
strates the government's strong commitment to create a modern national Information 
Infrastructure. The government has announced plans to develop e-government as a 
part of a 200S-2007 program. 1S Since 2008, government officials have been encour- 
aged to create their own personal blogs. 16 At the same time, the government follows a 
multilevel Information security’ policy, which maintains surveillance of telecommuni- 
cations and Internet traffic In the country. 

The Ministry of Transport and Communications (MTQ Is the main policymaker and 
regulator In the telecommunications market. The Agency for Informatization and 
Communication (AIC), a central executive body in the IT field. Is authorized to Imple- 
ment state policy in telecommunications and Information technology development 
Industries, exercise control In these sectors, and Issue licenses to every type of telecom- 
munications service. 17 The Security Council (SC», a body chaired by the president, is 
responsible for drafting decisions and providing assistance to the head of state on 
Issues of defense and national security. 16 The SC also prepares a list of Web sites every 
six months that should be blocked or forbidden from dlstnbutlon. A 200S SC decision 
made It Illegal for key national security bodies to connect to the Internet (namely, the 
Ministries of Emergency Situations, Internal Affairs, and Defense, and the National 
Security Committee). However, despite this prohibition, ONI field researchers found 
evidence that state officials access forbidden Web sites using dial-up accounts and ano- 
nymizer applications. 

The security system in Kazakhstan Is complex and multilayered. The Inter- 
Departmental Commission Is charged with coordinating and developing the national 
information infrastructure. The National Security Committee (NSC) monitors presi- 
dential, government, and military communications. The Office of the Prime Minister 
Is an authorized state body responsible for the protection of state secrets and mainte- 
nance of information security. Broadly defined, a "state secret" encompasses various 
government policies as well as Information about the president's prls’ate life, health, 
and financial affairs. The NSC has Issued a general license to the private Agency on 
Information Security to establish and organize facilities for cryptographic protection 
of Information, as well as to formulate proposals on Information security to state 
organizations, corporate clients, banks, and other large commercial companies. 

The Kazakh Ministry of Internal Affairs operates Department "K", which bears the 
functions of Its counterpart In the Russian Federation. This department is tasked 
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with investigating and prosecuting cyber crime and cyber attacks. At present, ISPs are 
required to prohibit their customers from disseminating pornographic, extremist, or 
terrorist materials or any other Information that Is not In accordance with the coun- 
try's laws. 19 Kazakh officials are also considering additional laws to further regulate 
the Kazakh Internet.* One draft law presently under consideration envisions liability 
for owners of Web sites hosting weblogs and forums, as well as users of chat rooms. 
The draft law equates Internet sites to media outlets and applies similar regulations 
with respect to content. The authors of the law Justified tighter oversight by the need 
to fight cyber crime and provide greater accountability for Internet users. 

The Kazakhstan Association of IT Companies is the officially recognized administra- 
tor of the ".kz" domain. It Is registered as a NGO, but It has 80 percent government 
ownership. The rules of registration and management of the ".kz" domain were Issued 
by the State Agency on Informatization and Communication of the Republic of 
Kazakhstan In 2G0S. In recent years, the cost for registering and maintaining a domain 
name have significantly decreased, thereby boosting the development of the Kazakh 
portion of the Internet. Registrations are subject to strict regulation. Applications may 
be denied If the server on which they are located resides outside Kazakhstan. Even 
though the primary legislation guarantees freedom of speech and prohibits censorship, 
the government often resorts to various legal mechanisms to suppress "Inappropriate" 
Information or to ensure that domain names used by opposition groups are frozen, or 
withdrawn. As a result, very few political parties in Kazakhstan use the Internet, and 
few opposition or Illegal parties have an online presence (at least within the ".kz" 
domain). 

The 1CT sector In Kazakhstan Is overregulated, as evidenced by some 300 legislative 
acts that expressly or implicitly control the 1CT environment. All telecommunications 
operators are legally obliged, as part of the licensing requirement, to connect their 
channels to a public network controlled by KazakhTelecom. The so-called Billing 
Center of Telecommunication Traffic, established by the government In 1999, helps 
monitor the activity of private companies and strengthen the monopolist position of 
KazakhTelecom In the IT sphere. In the past, some telecommunications operators cir- 
cumvented such regulations by using VoIP for their Interregional and International 
traffic, but the Imposition of VoIP telephony tariffs eliminated this option. 

Surveillance 

The government has established systems to monitor and filter Internet traffic. Since the 
traffic of all first-tier ISPs goes through KazakhTelecom's channels, surveillance and 
filtering Is centralized. The ONI suspects that state officials Informally ask Kazakh- 
Telecom to filter certain content. KazakhTelecom, along with some Russian companies, 
has openly signed an agreement to provide filtering, censorship, and surveillance on 
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the basis of Security Council resolutions. There are several recorded cases of journalists 
and Web site owners that have been prosecuted under broad media and criminal pro- 
visions.' 1 Oppositional and Independent media sites have been permanently sus- 
pended, allegedly for providing links to publications concerning corruption among 
senior state officers and the president. 14 

In 2004, the chairs of the National Security Committee and the Agency for Infor- 
matization and Communications approved Rules Providing for Mechanisms for Moni- 
toring the Telecommunications Operators and Networks. These rules prescribe full 
collaboration and information shanng between the government agencies. This system 
is similar to that of the Russian SORM, introduced to monitor activities of users and 
any related information. The rules oblige ISPs to register and maintain electronic 
records of customer Internet activity. Providers are required to Install special software 
and hardware equipment In order to create and store records for a specified amount of 
time. Including log-ln times, connection types, transmitted and received traffic be- 
tween parties of the connection, Identification number of the session, duration of 
time spent online, IP address of the user, and speed of data receipt and transmission. 

ONI Testing Results 

The OpenNet Initiative conducted testing on two main ISPs: KazakhTelecom and Nur- 
sat KazakhTelecom blocks opposition groups' Web sites, regional media sites that carry 
political content, and selected social networking sites. A number of proxy sites provid- 
ing anonymous access to the Internet have also been blocked. The ONI suspects that 
filtering practices In Kazakhstan are evolving and are performed at the network back- 
bone by KazakhTelecom. which filters traffic It provides to downstream operators. Con- 
sequently, Kazakh ISPs may unknowingly receive pre-filtered content. At the same 
time, not all incoming and outgoing traffic passes through KazakhTelecom 's central- 
ized network, resulting In Inconsistent patterns of blocking. 

The majority of Internet users are on "edge" networks, such as Internet cafes and 
corporate networks. Kazakhstan companies apply filtering mechanisms at the user 
level to prevent employees from accessing pornography, music, film, and dating Web 
sites. However, ONI testing found that Kazakhstan does not block any pornographic 
content or sites related to drug and alcohol use. 

Conclusion 

The Kazakh government has harnessed efforts to modernize the rr sector, promote 
ICTs, and encourage e -government in order to spur social development. Nevertheless, 
the lack of a competitive fixed-line market and the partial market liberalization leaves 
the growing demand unsatisfied and slows down development of the IT sector in the 
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country. The government has put in place a complex security system that b capable of 
state surveillance of Internet traffic and suppression of undesirable Internet content 
Given government pressure on opposition media, self<ensorship may also be an Issue 
among online media publishers and bloggers. The technical sophistication of the 
Kazakhstan Internet environment is evolving and the government's tendency toward 
stricter online controls warrant closer examination and monitoring. 
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Access to the Internet In Kyrgyzstan 
has deterioiated as heightened politi- 
cal tensions have led to more fre- 
quent Instances of second- and third- 
generation controls. The government 
has become more sensitive to the 
Internet's influence on domestic poli- 
tics and enacted laws that Increase 
Its authority to regulate the sector. Re- 
cent liberalization of the telecommu- 




nications market in Kyrgyzstan has made the Internet affordable for the majority 
of the population. However, Kyrgyzstan Is an effectively cyberlocked country de- 
pendent on purchasing bandwidth from Kazakhstan and Russia. The increasingly 
authoritarian regime In Kazakhstan Is shifting toward more restrictive Internet 
controls, which Is leading to Instances of "upstream filtering" affecting ISPs In 
Kyrgyzstan. 


Background 

In 200S. Kurmanbek Bakiev won the presidential elections after the violent downfall of 
the 14-year authoritarian regime of the former president, Askar Akayev. The new head 
of state vowed to distribute more powers to the parliament, encourage free speech. 
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1 KEY INDICATORS [| 

GDP per capita, PPP (constant 2005 international dollars) 

1,894 

Life expectancy at birth (years) 

68 

Literacy rate (percent of peopfe age 15+) 

99 

Human development index (out c4 1 79) 

1 22 

Rule erf law (out of 211) 

191 

Voice and accountability (out of 209) 

149 

Democracy index (out of 1 67) 

114 (Hybrid regime) 

Digital opportunity index (out of 181) 

135 

Internet users (percent of popiiaticn) 

13.8 


Source by Irxfcdtor World Bank 2009a, Work) Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economist InteBgence Unit 2006, ITU 2007, MMwatts Marketing 
Croup 2009. 


fight corruption, and tackle poverty. However, Bakiev's enthusiasm to Introduce dem- 
ocratic constitutional amendments seemed to have died away soon after his Inaugura- 
tion. The political shift In power did not result In significant economic Improvements 
In Kyrgyzstan, as the country entered economic stagnation and two-thirds of the pop- 
ulation remained below the poverty’ line. International observers predict that new civil 
conflicts may erupt If the country does not adopt urgent economic measures. 1 

The Internet Is one of the few free outlets for expressing public criticism In Kyrgyz- 
stan, and It has been used as an Instrument to mobilize protest and opposition against 
the government. Kyrgyzstan's UN global ranking for e-government for 2008 (0.41 95) 
has deteriorated; however, compared to Its Central Aslan neighbors, the country re- 
mains In second place after Kazakhstan. 2 

Internet Infrastructure 

Kyrgyzstan has one of the highest Internet penetration rates In Central Asia, although 
the figures gathered from different sources vary widely. According to local sources, 
around 7 percent of the population had access at the end of 2008 (760,664 people).* 
The ITU reports a high figure for Internet penetration for 2008 (13.8). The government 
estimated that Internet penetration would reach 10 percent by 2008,* while the United 
Nations e-Covenimfirl Survey states that Internet penetration was no more than 5.6 per- 
cent for 2008* Broadband users In Kyrgyzstan are estimated to be only 0.05 percent 
for 2008> Personal computers (PCs) remain unaflordable for the vast majority: only 
1.9 percent of the population own a PC. 7 There are more than 150 public Internet 
access centers in the country. Including commercial Internet cafes and free-access cen- 
ters sponsored by NGOs. The ma|orlty (Si percent) of users access the Internet from 
their workplace, 21 percent through their mobile telephone, 20 percent from Internet 
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cafe, and only 8 percent from home. Development of the Internet Infrastructure still 
targets only the urban markets. In particular the two largest cities — Bishkek (in which 
77 percent of the Internet users are concentrated) and Osh. 

There are slightly more female than male users. Forty percent of all users are aged 
between 10 and 20, 35 percent are aged 20 to 30, and 16 percent are between 30 and 
40. Most of the users are students (SO percent), and they prevail over the users who 
work (34 percent of users are employees in private companies, and 9 percent are 
employees in the state administration). Interestingly, the 25 percent of users who 
have defined themselves as unemployed make up the third largest group of Internet 
users. Russian sites remain the most visited among Kyrgyz Internet users (90 percent), 
compared with only 8 percent Kyigyz and 2 percent English-language sites. 9 In spite of 
the popularity of the Russian language In everyday life, the Kyrgyz language portion 
of the Internet Is expanding. 

Kyrgyzstan has made relatively early progress In the liberalization of Its economy 
compared to other CIS countries. The republic |olned the WTO in the second half 
of 1998. In order to comply with the requirements for liberalization of the telecom 
sector in 2006, the government agreed to put more than 77 percent of the Incumbent 
KyrgyzTelecom up for sale. Nonetheless, only 10 percent of the shares were transferred 
to private hands by 2007, and 77.84 percent of the incumbent Is still owned by 
the state. In 2008, around 61 percent of all users connected to the Internet through 
KyrgyzTelecom. 10 

Notwithstanding the pending privatization of the main Incumbent, the liberaliza- 
tion of telecommunications services, driven by foreign Investment and financial assis- 
tance, has resulted in an increasingly competitive, profitable, and growing Internet 
sector in the last few years. The Law on Electronic and Postal Communications, drafted 
on the basis of sector best practices, has opened the market for competition. The com- 
munications regulator has developed and implemented new access, interconnection, 
and tariff regulations after extensive consultations with stakeholders." The competi- 
tive market has provided a wide choice of telephone connection service, Internet ac- 
cess, mobile connection, and television and radio channels to the population. This 
has led to Increased competition among the operators, and In particular Internet ser- 
vice providers. In 1996, there were only two operators — Aslalnfo and Elcat — that 
charged USD 2.S0 per hour for Internet use. By 2000, there already were 16 companies 
providing Internet access for USD 0.90 an hour, and finally in 2005 there were 38 com- 
panies on the market, which dropped the cost for Internet access to USD 0.30 an hour. 
To win competitive advantage on the market, ISPs have Introduced Internet cards, and 
these have become very popular. 

Out of the 38 active ISPs, only three have independent external connections to the 
International Internet (KyrgyzTelecom, Salma Telecom, and Elcat). Also, only three 
providers own the infrastructure they use (KyrgyzTelecom. Salma Telecom, and Elcat). 
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The others lease lines and cables from the stale-controlled top-tier ISP KyrgyzTelecom. 
The government has a major stake (SO percent) in Elcat, another top-tier ISP. All other 
ISPs are private except for the research and educational networks. All ISPs are based In 
the capital and very few of them operate in other regions. The majority of ISPs connect 
to the Russian portion of the Internet by fiber-optic cable. In addition to Its major 
Russian connection, KyrgyzTelecom has built external connection ports to China 
and Kazakhstan. On a number of occasions, KyrgyzTelecom has been affected by 
KazakhTelecom’s filtering practices, since It is buying international traffic from the for- 
eign provider. For Internet data transfer, two of the largest ISPs— Aslalnfo and Totel— 
use fiber-optic lines financed by the Soros Foundation and extend parts of the infra- 
structure themselves where necessary. There are a number of Internet cafe In the cap- 
ital, and although Internet caffs can be found In the regions, the connection is often 
unreliable. 

The Soros Foundation also financed the national Internet Tlaffic Exchange Point 
(IXP). This 1XP is governed by the Association of Telecommunications Operators and 
dlstnbutes local traffic among the local ISPs. The International Internet bandwidth in 
the country Is 300 Mbps, and the most popular means for Internet access Is through 
dial-up connection. Leased lines with transfer speeds of up to 64 Kbps are widely avall- 
able for businesses, while higher-speed broadband access lines are very limited. 12 A pn- 
vate company, Aslalnfo, administers the country's top-level domain zone ".kg." u 
There are around 1,500 top-level domain names registered In the Kyrgyz Internet 
zone. The two most-visited Web sites are local media sites, while most information 
sought online Is education related. 

In recent years, the mobile sector In Kyrgyzstan has grown significantly. As a result, 
the government has expressed Its Intention to exert control over the mobile services. 
The number of mobile users In 2006 topped 1,000,000 (or 20 percent of the popula- 
tion), which Is an Increase of almost 50 percent compared to the previous year. As 
of September 2007, there were five mobile operators In the country. The dominant 
operator Is Bltel GSM, which owns 78 percent of the market. The other operators, 
MegaCom, FONEX. and Katel, have a limited presence with 10 percent. 8 percent, 
and 4 percent, respectively. 1 * A new operator, NEXI (offering CDMA service), became 
active In 2007. 

Overall, state regulation In the communications sector created fas’orable conditions 
for establishing a competitive communications market. By 2008, the government 
Issued 429 licenses to over 280 telecommunication companies. 

VoIP licenses are readily available. To obtain a license, companies are required to 
contnbute 20 million som (approximately USD 517,000) to a national IT development 
fund. Once an applicant obtains the license, they are licensed as an operator, or can 
resell their services to other companies. There are no restrictions on the provision of 
P2P services in the country. 
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Legal and Regulatory Frameworks 

Compared with Its neighbor Kazakhstan, Kyrgyzstan does not compel local ISPs to 
work with the state-owned provider and respects the rules of competition In the 
market. Previously. In order to ensure that a USD SOO million loan from the World 
bank to build Kyrgyzstan's telecom Infrastructure was repaid, a state decree granted 
KyrgyzTelecom the exclusive rights to International long-distance services until 
2003. ,s This decree has since been overruled, and ISPs now have Independent chan- 
nels for international connections. Operators have built their own data transmis- 
sion networks within the capital, Bishkek, providing an alternative to the Incumbent 
KyrgyzT elecom's Infrastructure. Outside of Bishkek, however, IT development Is 
hindered by poor Infrastructure, and only the Incumbent KyrgyzTelecom prosides 
Internet access. Internet companies are not Investing In building their own networks, 
leading to very low Internet availability outside the capital. A retall-tarlfl-reba lancing 
plan was proposed in 2008 , which Is expected to begin Improving investment In local 
Infrastructure. 

In 2002, the state declared 1CT development a priority by way of the National Strat- 
egy on Information and Communication Technologies for Development of the Kyrgyz 
Republic. The national 1CT plan was reviewed by the 1CT Council and approved by the 
president In 2003. Eager to harness Internet capabilities In order to stimulate economic 
growth, the government Is Implementing action plans and ICT strategies to encourage 
development of e-government, e-educatlon, and the e-economy. Moreover, under a 
|o!nt program between the government and International organizations, 9S percent of 
central government bodies, as well as SO percent of local ones, were connected to the 
Internet and now provide online Information about their services. 16 However, the 
cyber presence of political opposition is limited. Only three Kyrgyz Web sites belong- 
ing to political parties were detected by ONI. 1 7 

The communications regulator In the country Is the National Communications 
Agency (NCA) whose chairman is appointed by the president of Kyrgyzstan. The NCA 
Is financed by fixed-percentage contributions from operators, and therefore It is not 
dependent on the state budget. The NCA regulates and supervises postal and electronic 
communication companies. Issues licenses, monitors the Internet, and settles disputes 
among operators. The Ministry for Transport and Communications Is the policy- 
making body In the communications sector, responsible for formulating the sector 
development policy, including designing privatization programs, enhancing com- 
petition, and exercising monitoring functions. Although the functions of NCA and 
the ministry are legislatively separate, the two entitles often enter Into disputes with 
regard to their authority to regulate some activities. In particular licensing, radio 
frequencies, telephone number capacity, and tariffs. The process Is quite political and 
there are frequent disagreements concerning the development of communications 
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regulatory programs and regulations. Since 2008, the legal framework has been under 
revision as a working group Is debating new amendments to the 1998 Law on Elec- 
tronic and Postal Communications. At the same time, the government has Introduced 
new restrictions on the media. The recently Introduced amendments to the Media Law 
have attracted criticism from local journalists. 16 

The presidential administration has made efforts to Introduce restrictive measures to 
control Internet content. In the spring of 2005, members of the government proposed 
amendments to the Law on Mass Media that would have led to blocking all ".ru" do- 
main sites containing content "offensive" to Kyrgyzstan. In turn, these amendments 
would have limited Kyrgyz access to sources solely on the ".kg" domain, which Is regu- 
lated by local authorities, effectively creating a national "Intranet." Although this pro- 
posal was rejected. It revealed a shift In official attitudes toward reigning In Internet 
development In the country.* 9 

Kyrgyz national security laws do not directly apply to Internet activities. Never- 
theless. In 2003 the National Security Council proposed the creation of specialized 
communication and Information security within the Security Council. The Security 
Council would be. Inter alia, responsible for examining Internal and external policy 
questions In the field of Information security. In 2005, a government resolution on 
the Program for Information Security was adopted. The program's main objective is 
to create protection for the individual, the society, and the state In the information 
space, but even after Its amendments of 2005 It continues to lack precise definitions 
for what constitutes commercial secrets, state secrets, and private Information. This ab- 
sence of dear terminology may lead to variable Interpretations, which could create 
space for potential abuse. Furthermore, the program does not explicitly define what 
Information can be restricted, which broadens the scope for potential abuse, Including 
the possibility that these provisions will be used as a justification for filtering Internet 
content. 

Surveillance 

There Is no legislation in Kyrgyzstan that allows national security bodies to organize 
surveillance over the Internet. KyigyzTelecom Itself launched a technical Investigation 
to prevent "gray traffic" generated by other ISPs, meaning spam or other Illegitimate 
requests for Information. 

Proposals have been made for conducting state-led surveillance activities at the ISP 
level. In July 2006, the State Agency for Intellectual Property proposed the creation of 
an "Inter-Departmental Commission on State Regulation of the Kyrgyz Segment of the 
Internet." This institution, based on an existing Russian model, would have coordi- 
nated the activity of the executive power bodies and organizations participating In 
the Kyrgyz segment of the Internet. The proposal was rejected. 



Kyrgyzstan 


197 


On a few Isolated occasions, the government has attempted to track down the IP 
addresses of users accessing forums or chats. 

ONI Testing Results 

In 2007 and 2008, the OpenNet Initiative conducted testing from various access points 
on four main first-tier ISPs: Aslalnfo, Elcat, KyrgyzTelecom, and Salma Telecom. The 
ONI could not officially detect filtering by the providers at the time testing was carried 
out. 

In 2008 and 2009, ONI observed a number of Web sites penodlcally unavailable 
on KyrgyzTelecom and Salma Telecom, such as http://www.kyigyzpiess.com, http:// 
www.prezldent.kg (a site containing materials derisive to Kyrgyz state officials), and 
http://www.24.kg (a media site). The reasons why these sites were targeted have not 
been clarified, although these observations are consistent with second-generation con- 
trols. In 2005, during the parliamentary elections, ONI documented the extensive use 
of DDoS attacks against opposition and media Web sites and Kyrgyz ISPs. 20 

Flltefing by upstream providers (upstream filtering) was also detected in early 2009, 
with a number of Web sites blocked by the Kazakh state Internet provider, which In- 
cluded http://www.llvelournal.com (a popular blogging site), http://www.lntemews.fr, 
http://www.poslt.ru, and others. Access to these sites was Inaccessible for the ma|orlty 
of users In Kyrgyzstan because of filters Implemented by the main Kazakh telecommu- 
nication operator, which sells its services to KyrgyzTelecom. Filtering also exists at the 
enterprise level (l.e., NGOs, corporate clients) in order to block access to content 
deemed Irrelevant and to economize on Internet traffic. 

Conclusion 

The Kyrgyz government has implemented policies aimed at fostering the development 
of the communications sector, which Is seen as an instrument for attracting foreign in- 
vestment Potential limits In Internet freedom are posed by generally poor access and 
"upstream filtering" resulting from dependence on Kazakh and Chinese connections. 
There Is also evidence of emerging second-generation methods, which are employed 
during periods of heightened political tension in the country. While the Kyrgyz gov- 
ernment has shown determination In opening up the market to competition and abol- 
ishing measures leading to state-controlled access, much remains to be done in order to 
establish stable mechanisms guaranteeing media freedom and freedom of Information. 
Kyrgyzstan Is unlikely to follow the example of Its neighbors that have Introduced 
first-generation controls on Internet access, but second- and third-generation controls 
are likely to continue to evolve as the government grapples with the Increasing signifi- 
cance of the Internet In domestic politics. 
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Interne! users in Moldova en(oy 
largely unfettered access despite the 
government's restrictive and Increas- 
ingly authoritarian tendencies. Evi- 
dence of second- and third-generation 
controls Is mounting. Although filter- 
ing does not occur at the backbone 
level, the ma|orlty of filtering and sur- 
veillance takes place at the sites where 
most Moldovans access the Internet: 

Internet cafes and workplaces. Moldovan security forces have developed the 
capacity to monitor the Internet, and national legislation concerning "illegal 
activities" Is strict. 



Background 

Moldova Is a parliamentary republic with a president at the head of the state. A newly 
sovereign state as of the early 1990s, Moldova experienced both political and economic 
turmoil. Separatist movements erupted in the Transntstrta region, which operates as an 
Independent (albeit unrecognized) state with separate telecommunications and broad- 
casting networks. 
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1 KEY INDICATORS 1 

COP per capita, PPP (constant 2005 international dollars) 

2,409 

Life expectancy at birth (years) 

69 

Literacy rate (percent of peopfe age 15+) 

99 

Human development index (out c4 1 79) 

113 

Rule erf law (out of 211) 

148 

Voice and accountability (out oi 209) 

132 

Democracy index (out of 167) 

62 (Rawed democracy) 

Digital opportunity index (out of 181) 

111 

Internet users (percent of population) 

16.2 


Source by inrfcatcr World Bank 2009a, World Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economic InteBgence Unit 2006, ITU 2007, Mniwatti Marketing 
Group 2009. 


Moldova has one of the lowest Internet development levels In Eastern Europe 
and ranks 93rd worldwide on the United Nations e-Readlness Survey of 2008.' The 
government has prioritized Information and communication technology (ICT) as a 
means for national development and adopted a national ICT strategy designed to 
harmonize the sector with European standards by means of the European Union- 
sponsored Electronic South Eastern Europe Initiative (eSEE). The telecommunications 
sector In Moldova Is formally* liberalized, but the government has faced problems priva- 
tizing the main operator. Privatization of the national operator Is still under discussion. 


Internet In Moldova 

Internet penetration in Moldova has Increased significantly In the past few years. 
According to the ITU, at the end of 2006 approximately 10.6 percent of the country's 
population had Internet access. By 2008, penetration rales had risen to 16.2 percent 2 
Despite this high rate of growth, development of the Internet has been constrained by 
a lack of quality Infrastructure, low affordability, and the slow development of the 
fixed-line sector. In 2007, the number of subscribers to Internet access services at fixed 
locations increased by 33.2 percent, amounting to 110,200.* 

More than 93 percent of ADSL access Is provided by a single ISP, Moldtelecom.* 
Broadband usage Is increasing, driven by rising demand and falling prices. 4 The cost 
for unlimited Internet ADSL access Is approximately USD 11 a month (February 
2009)* compared to EUR 2S a month a couple of years earlier. Broadband subscriber 
penetration reached 3.23 percent, up 1.86 percent, with two-thirds of the subscriptions 
concentrated In the capital, Chisinau, where household penetration was 30.8 percent. 

Ownership of personal computers Is also Increasing, with 15.3 percent penetration as 
of 2006. 7 Most users are under 35 years. 8 Nearly half access the Internet from their 
place of work, 33.6 percent use Internet at home, and 8.1 percent use public access 
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points. The Internet subscriber statistics follow news that the growth of fixed-line tele- 
phony penetration In the country dropped to 3 percent In 2008 while mobile penetra- 
tion rose by 28.7 percent over the same period. 9 Nearly 8S percent of Internet access 
connections are mobile phone connections. In 2008, the Moldovan regulator reported 
that the number of mobile Internet connections rose by 11S.4 percent to 1,437,000. 10 

Moldova has five tier-one providers: Moldtelecom, Telemedla Group," Dynamic 
Network Technologies (DNT), Relsoft, and Rlscom. A further 1 1 ISPs provide access 
to all regions of the country. The telecommunications market Is dominated by Mold- 
telecom, which retains Its near monopoly position in the market (98 percent). Market 
liberalization in Moldos’a started before 2004, partly as a result of pressure to |oln the 
WTO and harmonize Its standards with the EU telecommunications legal framework. 
Most of the ISPs rent Infrastructure from Moldtelecom. Almost all ISPs exchange traffic 
through an 1XP controlled by Moldtelecom. Interdnestrcom Is the only ISP offering 
services on a wide scale throughout the breakaway region, Transnlstrla. 

Fixed-line remains underdeveloped compared to other European nations, much like 
Internet and broadband penetration. However, communications have recorded solid 
growth, reaching more than 10 percent of the country's GDP In 2007 (9.1 1 percent in 
2008). 12 International Internet bandwidth In the country Is currently 4,S00 Mbps." 
Between 2004 and 2007, mobile phone ownership increased from to 790,000 (23.2 
percent) to 1,880,000 (55 percent)." There are more than 14 operators providing 
VoIP services on the international voice market, although Moldtelecom has retained 
the largest share." The taxes on VoIP operators were reduced several times in recent 
years. Operators need to obtain a license In order to offer IP services. 

Approximately 5,000 domain names are registered in the ".md" domain, some of 
which are foreign Web sites." The most popular languages accessed by Internet users 
are Romanian, Russian, and English. The most-visited local Web sites are local media 
sites, forums, and advertising sites. The most -used local search engines are google. md, 
oumet.md, super. md, and mail.ru. The main purposes for accessing the Internet, 
according to respondents to a local survey, are sending and receiving e-mails, reading 
political news, and looking up educational information. 17 

Opposition groups have recognized the Importance of the Internet. Most Moldovan 
political parties have a solid online presence and frequently update their Web sites." 
The government has Invested In the Internet and actively supports an effort to ensure 
that ministries and other public bodies maintain Web sites In order to bring more 
transparency to their operation. More than 40.6 percent of Internet users report that 
they frequently access government Web sites. 19 

Legal and Regulatory Frameworks 

In order to meet requirements for WTO and the EU accession, the telecommunications 
market has been liberalized and no exclusive rights remain. 20 Moldtelecom — the 
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Incumbent telecom operator — decreased Its tariffs, allowing other providers Into the 
market. However, low computer penetration rates and Inconsistent government policy 
remain major Impediments to Internet growth. 

The state has officially committed to developing Moldova as an Information society, 
although many of Its policies undermine this objective. Moldtelecom. which Is also 
the major national ISP, remains under state control despite large-scale criticism and 
four failed privatization attempts. Moldtelecom also controls Unite, one of the four 
mobile operators created In 2007. At present, ISPs are forced to rent access from Mold- 
telecom’s well-developed Infrastructure, a necessity which increases their costs and 
diminishes their competitiveness. Moldtelecom provides the nondlscrlmlnatory Refer- 
ence Interconnection Offer, the last version having been approved by the regulator 
after much delay In December 2007. Even though some Interconnection agreements 
are now agreed between the Incumbent and IP and data transmission operators, some 
new entrants have complained about Insufficient access to Moldtelecom's network 
leading to inefficient usage of Infrastructure. 21 In Apnl 2009, the Moldovan regulator 
Introduced new guidelines on Interconnection tariffs. The regulation addresses the 
Issues of obligations Imposed on operators, with emphasis on transparency and non- 
dlscrlmlnatory stances toward competitors. 22 It remains to be seen In practice how the 
new guideline will be applied by Moldtelecom. 

The Ministry of Information Development Is the main policymaker In the held of 
Information and communications and was drafting new Policy Strategy 2009-2011. 
The ministry's objective Is to Implement the National Strategy and Program on estab- 
lishing "e- Moldova." 

The main law regulating the Internet Is the 2007 Law on Electronic Communication. 
The law established the National Agency for Telecommunications and Information 
Regulation (NATIR) as the telecommunications regulator in Moldova. This law man- 
dates the government to harmonize national legislation with European standards. The 
law Is Intended to give NATIR full autonomy over the sector and replaces the licensing 
regime. Internet service providers can now start operating Immediately after notifying 
NATIR. 25 

This agency Is responsible for monitoring ISPs’ compliance with the law and keeping 
the Public Register of Electronic Communications Network and Service Providers. The 
law specifically provides for the possibility of introducing anticompetitive restrictions 
on service providers. The agency can demand that ISPs provide additional accounting 
Information, can make them change to cost-oriented tariffs, and can introduce other 
measures In order to stimulate efficient market competition; and NATIR also regulates 
the management of the country's highest-level Internet domain (".md"). The National 
Security Doctrine of Moldova as of 1995 did not include the Internet. The Supreme Se- 
curity Council (SSC), which oversees Implementation of the president’s decrees related 
to national security 1 , monitors ministries’ and state agencies’ various activities to ensure 



Moldova 


205 


national security. The Ministry of Information Development carries out government 
policies related to Information and communications and encourages collaboration be- 
tween state and private organizations. The Moldovan legislation does not provide for 
comprehensive regulation of Information security. Rather, the National Security and 
Information Service Is endowed with broad authority to monitor and gather Informa- 
tion on Internet usage and data transmission related to national security Issues. 

In July 2008. a Moldovan court ordered the seizure of the PCs of 12 young Internet 
users for posting critical comments online against the governing party. The suspects 
were accused of Illegally inciting people "to overthrow the constitutional order" and 
"threaten the stability and territorial Integrity of the Republic of Moldova." It Is un- 
known how the authorities obtained the names of the people, but some suggest that 
an ISP provided them with the IP addresses of the users.** 

Even though Moldova Is one of the poorest countries In Europe, Internet and cell 
phones are used extensively by opposition and civil society groups to organize protests 
and voice their opinion. After the parliamentary elections on April S, 2009. thousands 
of Moldovans attempted to gather In Chisinau's main square to protest the results. The 
protesters set the Parliament and president’s offices on fire, images of which were 
broadcast around the world. As the guarantees for press freedom are still weak, Mold- 
ovan state television continued to show regular TV programming rather than broad- 
casting events occurring In the capital. 25 The authorities disconnected cell phone 
coverage In the main square. More than 10,000 Moldovans |olned In on Twitter 
(some with GPRS technology on their mobiles) to share their opinions and spread the 
news of Chisinau’s political protests. The authorities attempted to shut down a number 
of Web sites for a few days, demonstrating a resolute hand In dealing with protesters. 
This incident, like others that have transpired In the region (e.g., the Ukrainian Orange 
Revolution), reveals the growing role of the social media in Eastern Europe as a tool 
for organizing protests and diffusing them online. 2 ® At the same dme. It creates the 
concern that governments In the region, aware of the Increasing Importance of social 
media, might attempt to close down free speech outlets anytime they feel threatened. 

Surveillance 

The National Security and Information Service Is authonzed to monitor the Internet 
and collect any Information necessary to prevent Infringements of the laws. Surveil- 
lance in Moldova is permitted only after obtaining a court order. There Is no special 
legal act providing for Internet surveillance per se. Nevertheless, surveillance may effec- 
tively be carried out on the provider level or at companies. The Parliament Is deliberat- 
ing on legislative proposals, including changes to the Law on Operative-Investigative 
Activities and the Law on Telecommunications that would allow government agencies 
to carry out surveillance on telephone and electronic communications. The law Is 
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still under consideration, but If it is approved. It Is expected that it might follow the 
Russian Law on Surveillance (SORM). 

Moldova has established two departments responsible for overseeing the activities of 
participants in the 1CT sector. The first structure, within the Ministry of Internal 
Affairs. Is charged with prevention of lnteneglonal and Informational infringements. 
The other body, within the Center on Prevention of Economic Crimes and Corruption, 
has special powers to prevent Infringements in the IT and other fields. 

Moldova also possesses a comprehensive centralized database of information on all 
its citizens. This system, called registru (registry), has been heavily criticized by human 
rights groups for being too comprehensive and lacking oversight. Privacy fights are 
poorly developed in Moldova, and not yet defined in law. The information held by 
registru is extremely comprehensive and brings together data collected by all state 
agencies. Consequently, human rights groups fear that it represents unwarranted and 
unprecedented surveillance. The system has proven highly successful, and it is a model 
for governments in the CIS. It has been exported to several other countries in the 
region. The current Moldovan president, a former internal ministry general, supports 
registru — in part because it was originally developed within the Ministry of Internal 
Affairs. 

ONI Testing Results 

In 2007 and 2008, the OpenNet Initiative carried out testing on three first-tier ISPs 
in Moldova: Moldtelecom, Telemedia, and DNT SunCommunlcatlons. Results did not 
reveal any filtering carried out on the Internet backbone. 

In Internet cafes, access is limited more by surveillance than by direct filtering. 
Specific content is prohibited, and, if it is accessed, the user Is fined. Approximately 
56 percent of Internet cafes' administrators surveyed by ONI admitted to filtering and 
surveillance activities in 2006. Other administrators stated that they noted that some 
Web sites were inaccessible, but would not confirm that they used any specific filtering 
system in the Internet cates. 

Conclusion 

Moldovan authorities have recognized the political and social importance of the Inter- 
net. State authorities have Interfered with mobile and Internet connections in an 
attempt to silence protestors and influence the results of elections. Generally, the Inter- 
net remains largely unfettered. Previous research by ONI revealed that at "edge" loca- 
tions, such as Internet cates and some enterprises, monitoring or filtering of certain 
content and services occasionally occurs. Research also suggests that Moldovan secu- 
rity forces have developed mechanisms to monitor Internet content. Given the low 
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Implementation of the laws protecting citizen's rights and privacy, as well as the insuf- 
ficient Independence of the regulator and the courts with regard to the state-owned 
Moldtelecom, there are few checks and balances in place to prevent authorities from 
taking a more aggressive stance on policing Internet content or from hindering new* 
entrants on the market. 
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Russia 


The absence of overt state-mandated 
Internet filtering In Russia has led 
some observers to conclude that the 
Russian Internet represents an open 
and uncontested space. In fact, the 
opposite is true. The Russian govern- 
ment actively competes in Russian 
cyberspace employing second- and 
third-generation strategies as a means 
to shape the national information 

space and promote pro-government political messages and strategies. This 
approach is consistent with the government's strategic slew of cyberspace that Is 
articulated in strategies such as the doctrine of Information security. The DoS 
attacks against Estonia (May 2007) and Georgia (August 2008) may be an Indica- 
tion of the government's active interest in mobilizing and shaping activities in 
Russian cyberspace. 



Background 

Under Vladimir Putin, the federal government of the Russian FederaUon (RF) has con- 
solidated Its power, stopping regional government representatives of some of their 
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1 KEY INDICATORS Q 

GDP per capita. PPP (constant 2005 international dollars) 

13,873 

Life expectancy at birth (years) 

68 

Literacy rate (percent of people age 15+) 

100 

Human development index (out of 1 79) 

73 

Rule erf law (out of 211) 

175 

Voice and accountability (out of 209) 

166 

Democracy index (out of 1 67) 

107 (Hybrid regime) 

Digital epportunity index (out of 1 81 ) 

51 

Internet users (percent of population) 

27 


Source by irxfcalor World Bank 2009a, World Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economot InleBgence Unit 2006, ITU 2007, Maniwatts Marketing 


Group 2009. 

authority.' Putin abolished the principle of electing regional heads by regional parlia- 
ments and channeled a number of legal and institutional reforms that demonstrate a 
gradual tendency to reintroduce a more centralized form of governance over Its sub- 
jects. These shifts have been felt In all sectors of public life. 

Putin’s administration after eight years In power brought Russia back to the inter- 
national scene as a strong global player, and this success has Inspired a wave of nation- 
alism fueled by government policies. Putin enjoyed high approval ratings in Russia up 
to 87 percent (July 2006)* largely because of the Improved economic indicators of the 
country. The economy has performed well under his watch, especially in comparison 
to the period between 1991 and 1999. It has been grossing steadily, bolstered by high 
global energy prices. The growing popularity for Putin, however, was coupled with a 
significant drop in political rights and civil liberties. 3 Putin’s administration effectively 
silenced the opposition, cracked down on antlgovemment protests, reimposed control 
over the media, and concentrated power In the presidency. The policy line introduced 
by Putin remains largely unchallenged during the first year of Dmitri Medvedev's pres- 
idency. Putin and his supporters refer to the current system of governance In Russia as 
"sovereign democracy." International observers disagree, describing the established 
system of government as an Increasingly authoritarian state, albeit one that Is sup- 
ported "with the consent of the governed.” 4 

As President, Putin strengthened state control over major outlets, focusing especially 
on media owned at the time by Russian oligarchs. As a sanction for unpaid debts, Putin 
took away owners' shares in television channels and placed the media under state con- 
trol. This action sharply Influenced the flow of Information and the management of 
the outlets. Major federal television channels are either directly or indirectly controlled 
by the government, with the sole exception of RenTV, which openly criticizes the gov- 
ernment but, Ironically, Is owned by a Kremlin supporter, Vladimir Potanin. 4 Print me- 
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dla axe the least contxolled part of the Russian media, but thelx influence may not be as 
strong as that of other media. The control on the media tightened particularly during 
and after the 2004 "Beslan Crisis/' In which 1,100 students were taken hostage in 
Beslan In the North Caucasus by terrorists demanding an end to the second Chechen 
war.® 

The Russian government has deliberately created mechanisms to centralize power in 
the Kremlin and Influence major Information outlets. This policy has been expanded 
to reach the Internet through a range of approaches from censorship to propaganda, 
resulting In self-censorship. 

Although Putin admittedly has never sent an e-mail In his life, 7 his administration 
has been Increasingly Interested In regulating the Internet. Under Medvedev's presi- 
dency (since May 2008), Putin, now as the prime minister, continues to have signifi- 
cant Influence over the Internal and foreign politics of the state. 

Dmltrt Medvedev has demonstrated familiarity with Internet communications. Dur- 
ing the election campaign, he addressed questions about the Russian blogospheie, 
promising clement conditions for Its development. In October 2008, Medvedev 
launched his own video blog. 8 However, no significant changes have been Introduced 
to promote media freedom and freedom of expression In Russia. Nonetheless, Russian 
media have surmised that Medvedev's Involvement has led to the removal of the 
restrictions on foreign participation In ISPs, which were envisioned In the Draft BUI 
for Amendments to the Law "On the Order of Foreign Investment In Companies and 
Organizations Having Strategic Importance for National Security.'' 

Internet Infrastructure 

Internet use grew in Russia in the 1990s with a regime unprepared to deal with 
new Information and communication technology (ICO challenges. The post-Soviet 
government seemed to prefer to have strong control over the Internet, similar to the 
way It already controlled traditional media, but left It alone for lack of viable ap- 
proaches. Internet penetration In Russia was low during this period, and access was dif- 
ficult, factors that may explain why the Internet was not a major government concern. 9 

With the election of President Putin came a new focus on regulating the Internet. He 
Issued the Information Security Doctrine In 2000, which outlined Russia's desire to 
encourage development of the information space amid growing security concerns. 
This document regulates traditional media but also indirectly positions the Internet at 
the core of national security' policies. 10 Within a few years, the majority of other CIS 
countries adopted laws similar to Russia's Information Doctrine. 

As of December 2008, the number of Internet users In Russia had reached 38 mil- 
lion." Internet penetration Is growing notably, though It remains predominantly 
two-tiered, with much higher Internet and PC penetration rates In Moscow and 



212 


Russia 


Si. Petersburg than in the rest of the country. The "e-readlness" standing of Russia as 
measured by the Economist Intelligence Unit 12 Is 59th out of 70 countries surveyed In 
2008. 11 The Ministry of Education and Science has Initiated national programs for 
providing Internet access to all general educational Institutions In the country. 14 Fifty 
thousand schools were connected to the Internet by the end of 2007. 14 Moreover, the 
government has announced Its plans to Install open-source software on every school 
computer by 2009. 

The ma|orlty of Russian Internet users are connected by broadband (40 percent), fol- 
lowed by dial-up (27 percent), and ADSL (23 percent). Seven million PCs were sold In 
Russia In 2006, of which 1.9 million were laptops, representing a 62 percent annual 
Increase from the year before. 16 

A significant portion of the telecom market has remained under state control. Tele- 
communication Investment Joint Stock Company Svyazlnvest Is one of the largest 
telecommunications holding companies in the world. It was created during the market 
transition by a regulation providing for the merger of a ma|orlty of the regional state 
telecommunications enterprises. 17 About 89 percent of the Russian telecommuni- 
cations Infrastructure now belongs to Svyazlnvest, 18 with the remaining 11 percent 
divided among several other operators. 19 The main shareholder of Svyazlnvest Is the 
Russian government through the Federal Property Agency (75 percent minus 1 share), 
and Comstar-UTS owns 17.31 percent plus 1 share. Some of the main regional ISPs are 
Svyazlnvest's subsidiaries: Central Telecommunication Company, North-West Tele- 
com, VolgaTelecom, Southern Telecom, Uralsvyazlnform, Slblrtelecom, Dalsvyaz, and 
Central Telegraph. 20 

Rostelecom Is another large telecommunications operator and ISP. Despite strong 
International pressure for privatization, Svyazlnvest continues to hold SI percent of 
Rostelecom shares. Historically, Rostelecom has been the primary long-distance and 
International telephone operator, collecting mandatory Intermediary fees from other 
providers. Before the adoption of the new regulatory framework on communications, 
Rostelecom had a monopoly over the provision of International long-distance services. 
Under the new regime, providers of long-distance services may offer their services 
directly to users without paying Intermediary charges, provided certain prerequisites 
apply. These Include that the providers "are In technical conformity’ with the local 
and long-distance network operators, with a point of presence in every Russian admin- 
istrative region, and are operationally ready to provide long-distance services to any 
local network subscriber." 

Russia has more than a dozen main first-tier ISPs, which have independent con- 
nections to foreign networks, and several other Influential ISPs. First-tier ISPs In the 
Russian Federation are Rostelecom, 21 GoldenTelecom, 22 TransTeleCom, 24 Makomnet, 2 * 
TellaSonera, 24 Comstar-Dlrect (previously MTU-Intel), 26 Metrocom, 22 Corblna, 28 ER- 
Telecom, CentrTelecom, 29 RTComm, 40 RETN.net, 41 and RlNet. 42 The major ISPs In 
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Russia either are state owned or Include significant state participation. State participa- 
tion Is either direct or through a state-controlled entity. 

There are hundreds of ISPs throughout the country functioning on a divided market 
of well-connected big cities and underdeveloped Infrastructure In towns and villages. 
The established fixed-line providers have been traditionally the largest ISPs, though 
many small ISPs have started to emerge. Under a regulation that entered Into force 
at the beginning of 2006, all companies that control more than 2S percent of the ca- 
pacity of communication tralfic need to publish a list of prices for Interconnection and 
data transmission within 20 days for the Inspection and approval of the regulatory 
agency. 33 

There are several Internet exchange points (IXP) In Russia. The main ones are 
Moscow IX, 34 Independent, comprising various locations In Moscow; 34 SPB-1X in St 
Petersburg, |olntly with the MSK-IX; SAMARA-1X In Samara; NSK-IX In Novosibirsk; 
and KRS-1X In Krasnoyarsk. Other IXPs are the North-West Internet Exchange based 
in St. Petersburg and Ural-lX In Ekaterinburg and Perm. 

The cable television market and broadband Internet access market significantly 
Increased penetration to around 40 percent In 2007.*® broadband connections are 
growing as operators Invest In modernized networks. However, broadband Is emerging 
mainly In large urban areas (ADSL, cable, and FttH/FttB-based services). A large portion 
of residential areas use Ethernet local area networks (LANs), followed by dial-up (27 
percent), and ADSL (23 percent). Wireless broadband networks have become popular 
mainly In large tourist cities, especially St. Petersburg and Moscow, and some operators 
have announced plans to launch WI-FI coverage on a large scale. Also, IPTV services 
have been launched. 37 

In remote regions, satellite connection Is very attractive to the Russian population. 
In comparison to fixed-line charges. Two main educational networks in Russia (Radlo- 
MSU and the university network RUNET! are supported by satellite. 

There are about 2S0 mobile operators on the Russian market. The mobile market 
represents about 40 percent of telecom revenue. As of September 2006, the market 
was divided as follows: MTS, 34 percent; Vimpelcom, 32 percent; Megafon, 19 percent; 
and others. IS percent. According to studies, some 40 percent of the population does 
not have a mobile phone. Russia's three biggest operators were Issued 3G licenses 
in 2007. 

The Importance of the blogosphere to Russians Is Increasing rapidly. The Russian- 
language part of the Internet, or the RUNET, Is an active and vibrant environment. As 
a Russian-language platform, the RUNET has grown as the center of modern culture 
connecting Internet users from Russia and the rest of the CIS region, and ethnic Rus- 
sians In Germany, Israel, and the United States. It brings together people sharing the 
same language and similar history and culture, and Is a self-sufficient online environ- 
ment with Its own search engines, Web portals, free e-mail services, and social network 
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Web sites (most of them modeled after U.S. services). The most popular blog servers are 
IiveJournal.com and Llvelntemet.ru. The Russian site of Uvejournal has more than 
2 million* 8 registered users, while the site's readership amounts to nearly 10 million 
people, according to Anton Nosslk. one of the RUNET pioneers. 39 

The Russian blogosphere operates within an environment where the state directly 
competes with other actors for Influence. During election dmes, the Kremlin maintains 
a network of supportive bloggers and online media experts, similar to China’s so-called 
fifty cent party . This squadron of Kremlin bloggers has engaged In public discussions, 
trying to keep the level of political criticism low, to nurture nationalism, and to flood 
the Russian blogosphere with blogs that favor the regime during times of oppositional 
protests. 40 Instead of giving publicity to Its efforts to control the Internet through 
direct censorship, the government has turned to these soft approaches to combat 
undeslred content 

Recently, the Russian government has Implemented an unprecedented, and so far 
surprisingly effective. Initiative to engage with political dissent In order to weaken It. 
A number of pro-Kremlln blogs have been created; In number, they overshadow blogs 
not favoring the regime, and they were especially prevalent toward the end of 2007, 
when national political campaigns were under way for parliamentary and presidential 
elections. This strategy could also be intended to drown out the voices of opposition 
blogs. 

Effective strategic blogging has been seen to have an Impact. In April 2007, for ex- 
ample, an opposition movement held a march In Moscow. To Interfere with the Infor- 
mation about the march, blogger Pavel Danilin, a Putin supporter, together with his 
team, started blogging about a smaller pro-Kremlln march being held the same day. 
European Digital Rights noted, "they blogged so much and linked to each other so 
effectively, that they crowded out all the Items about the opposition march from the 
very influential top-five blog post listing on the Yandex Web portal." 41 A consistent 
and motivated group of supporters Is likely to channel the Kremlin's message to large 
online communities. According to Masha Upman, a political expert at the Moscow 
Carnegie Center, "Ihe Kremlin has lots of sites under Its control, financed by busi- 
nesses associated with the Kremlin or otherwise, which create an environment In 
which those more Independent ones are easily dissolved. This [dissolution of Indepen- 
dent sites) ... Is one thing that the Kremlin Is using to counter or neutralize the poten- 
tially stirring effect." 42 The blogs are not based on simple propaganda, and some of the 
bloggers are not even necessarily loyal; "they may be critical themselves, but this will 
be criticism that the Kremlin itself sort of oversees." 43 

Legal and Regulatory Frameworks 

The Constitution of the Russian Federation guarantees free speech and prohibits any 
restraint on the freedom of expression (Article 29). The constitution recognizes the 
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rights to privacy’ and data protection, the right to Information, and secrecy of commu- 
nications (Articles 23, 24, and 2S). 

The Law on Communications of 2003 44 further protects the secrecy of communica- 
tions and guarantees that restrictions on individual privacy are allowed only after a 
court order, unless otherwise envisioned by federal law 45 To meet Its obligations as a 
member of the Council of Europe, Russia adopted the Law on Personal Data In 2006. 46 
Although the law guarantees the privacy of the Individual, It provides for broad exemp- 
tions to the government In processing personal data. Also In 2006, Russia modified Its 
Information law, adopting the new Law on Information, Information Technologies, 
and Protection of Information.*' The new laws, together with the Labor Law, establish 
a legal framework for handling personal data, Including employee data. Russian experts 
claim that even though the new law on information guarantees citizens’ access to pub- 
lic Information held by federal or regional authorities, not more than 23.6 percent of 
the relevant Information is publicly available. 4 '* 

A presidential decree titled "Measures Providing Information Security to the Russian 
Federation in the Information Exchange Area," signed in May 2004, restricts the access 
of officials’ computers to the Internet. 49 The decree prevents computers and communi- 
cation networks from connecting to the Internet if they hold (have on their servers) 
state and official secrets, as well as other classified Information. 

The Internet In Russia B largely seen as an extension of media space. The mass media 
regime carries certain responsibilities, such as registration, necessary attestation, and 
others. The Internet escaped regulation in the Law on Mass Media, No.2124-1, 50 as 
the Law entered Into force In 1991. However, It Is held that the Internet should be 
regulated under this law anyway. Article 2 of the law states that It shall cover "other 
forms of periodic distribution of mass Information" as purported by officials. 5 1 This 
Interpretation has given grounds for detaining and prosecuting Web site owners and 
bloggers by authorities on the grounds of violation of media laws. Officials slew Inter- 
net proliferation as Increasing the government's responsibility for regulating the Inter- 
net space and ensuring that users act In accordance with legal and ethical norms of 
society. In at least one instance, the court Included an online forum In the definition 
of mass media, setting a precedent for prosecution under mass media provisions. 

On several occasions, the authorities have expressed Interest In subjecting content 
on the Internet, specifically online media, to media law. Federation Council member 
Vladimir Slutsker Initiated amendments to the Law on Mass Media: one of the amend- 
ments provides that Web sites visited more than 1,000 times a day should be subjected 
to registration as mass media outlets. 52 However, It was deemed Impossible to find all 
applicable sites and force Web site owners to register. For this reason, unofficially, It 
was agreed that the Web sites would register only voluntarily as mass media. 53 

According to Its supporters, the envisioned proposal would give official recognition 
to the registered Web sites and would be Important for controlling child pornography 
and defamatory materials, and even for providing Information about terrorist and 



extremist organizations. There are Incentives for Web sites to register as mass media 
outlets. Including an official stamp of legitimacy and permission to attend press 
conferences, request Information from authorities, and be present at sites of emergen- 
cies or mass protests. Another push for registration came In 2004 when the head of the 
Federal Agency for Print and Mass Communications, Mlchall Seslavlnskl. called for 
"Important" Web sites to register as mass media. 54 In 2004, there were 1,296 registered 
Web sites, a figure which had Increased to nearly 20,000 registered Web sites by 
2009. ss 

There have been several proposals to Introduce ISP liability for content found on 
their servers. 5 * In March 2008, a new Initiative was suggested by the Russian prosecu- 
tor general's office to hold ISPs Jointly liable with extremists for extremist content 
posted online. 57 However, currently no draft law Is known to have been proposed. 

The 1CT sector does not have an independent regulatory authority. Until 2007, the 
regulation of the sector was managed by the Ministry of Communications and Infor- 
matization through RosS vyazN adzor (the Federal Service on the Supervision of Com- 
munications), which reported directly to It. After the Russian Television and Radio 
Broadcasting Network (RTDN) lodged complaints In court against RosSvyazNadzor 
that the control It was exercising exceeded the limits provided by law, the agencies 
were reorganized. RosSvyazNadzor merged with another regulatory agency, the Federal 
Service on the Supervision of the Mass Media and the Protection of Cultural Inhert- 
tance. In addition to current responsibilities, the newly formed agency will also be 
responsible for protecting personal data and monitoring the processing of such data. 

The Federal Law on Communications of 2003 provides a simplified licensing regime 
for ISPs. In order to conduct business in Russia, operators need to obtain two licenses: 
one for data transfer and another for “telematic" (data transmission and storage) ser- 
vices. In 200S, the Ministry of Communications Introduced a licensing regime for 
VoIP services. Any VoIP service must be processed through a licensed long-distance 
telephone operator. 

libel Incurred through the media Is a alme regulated by the Criminal Code. It Is also 
addressed In the Law on Mass Media. Articles 43 through 45 of the law descnbe the 
circumstances for publishing a refutation In libel suits when the Information spread 
through the mass medium does not correspond to reality and denigrates honor and 
dignity. 58 Registered Web sites and producers of online content can be liable for defa- 
mation for published Information under the Criminal Code and In the Law on Mass 
Media. In at least one instance, the court included an online forum In the definition 
of mass media, setting a precedent for prosecution under mass media provisions. 59 

In December 2007, the Russian Supreme (Arbltrazh) Court upheld the seizure of 
media archives. According to the Internet outlet Regnum.ru, the court did not apply 
Article 57, which provides a media libel exception for published information.'*’ This 
precedent establishes that Internet outlets do not receive the protection of the law. 
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since they aie not treated as mass media outlets, thus leasing the door open to any 
potential defamatory claims. 

At present, the Criminal Code Includes numerous provisions that may be grounds 
for criminal charges in connection with Internet activities. Article 278, for example, 
criminalizes "forced assumption of and retention of authority." The Criminal Code 
provides for government officials to prosecute Individuals for posting objectionable 
content online. The text against terrorist activities In Article 282, In the section 


“Crimes against the Government," can be applied to online activities. The text states, 
"Incitement of national, racial, or religious enmity, abasement of human dignity, and 
also propaganda of the exceptionality, superiority, or Inferiority of Individuals by 
reason of their attitude to religion, national, or racial affiliation. If these acts have 
been committed In public or with the use of mass media" are punishable by fines 
equaling up to two years of salary and up to two years Imprisonment. This broad lan- 
guage leaves space for open interpretation of the statute, as It can apply to anything 
ranging from commentary on the Infamous Danish cartoons, 61 to racial slurs and hate 
speech. Insulting a government official Is an aggravated crime covered In Article 319, 
which may bring a fine of up to one month of salary or corrective labor of up to one 
year. 62 

The government and private Individuals can and do attempt to find broad inter- 
pretations of the laws In order to silence Independent Web sites. For example, the con- 
tent provider Bankfax was charged under Article 282 with insulting a group of people 
by referring to them as "oligarchs." 

The government has adopted the Law against Extremist Activities.* 1 Under this law, 
effectively any Web site hosting a forum section Is vulnerable. An Individual needs 
only to post hate or extremist (or other objectionable) speech in a forum and report It 
to the authorities before a moderator notices It to kick off legal prosecution. Violations 
are not uniformly prosecuted — most reported content does not lead to penalties, 
making the Internet a source of Information that Is not found In print media. If such 
speech Is detected, however, owners risk closure of their Web sites or fines. 64 

Censorship has not been legally Introduced In the country, though Informally It has 
been applied as a tool for use during a national crisis. Internet censorship has occurred 
or been discussed In several other ways — for example. Interference with the work of 
oppositional and Independent Web sites and restrictions Imposed by a court. 

Russia's government officials are sensitive to offensive speech posted online. The 
Criminal Code and the Law against Extremist Activities establish Individual liability 
for a broad range of "Illegal" content. A special enforcement agency. Department "K," 
was established within the Ministry of Internal Affairs to monitor for compliance with 
the regulations In cyberspace. Department “K" has branches in various regions and Is 
mandated to investigate crimes In the sphere of Information technologies, Including 
online hate speech and defamation. Aside from monltottng for possible defamation of 



officials online, the "cyber police" deal with unauthorized access to computer systems 
and networks, and the distribution of pirated software. 

An example of the activities of this cyber police department was the September 2007 
case Involving the sports site hc-rodina.ru. 6S The ISP of the sports Web site stopped 
maintaining service following an order from Department “K." The reasons for this 
censorship were "Inaccurate" comments about representatives of the government 
posted on the Web site's forum section. In another example, a blogger was sentenced 
to a year in |all for posting a caricature of Putin depicted as a skinhead.*® 

On several occasions, Russian politicians have proposed establishing a legal frame- 
work that would directly control the Internet. At the end of January 2007, the Fed- 
eration Council Commission on Information Policy discussed the possibility of 
Introducing a law regulating the Internet In order to establish a "safe" online environ- 
ment to protect people against the growing cases of Illegal activities** 

In July 2007, Putin spoke of making Russia "a global information technology power- 
house." Following his statement, the Kremlin announced plans to create a Cyrillic 
Web for Russia and the rest of the CIS and Bulgaria. The Russian Federation Is the 
only country other than China that has decisively announced plans to launch a self- 
contained and independent language Web parallel to the World Wide Web. At the 
end of June 2008, ICANN spoke In favor of proposals to establish Cyrillic and Chinese 
language-based domains. Although this Idea moves toward further development of 
the Internet, there are shared fears that this step might also lead to the division of the 
Internet and facilitate state censorship through the registration and management pro- 
cess. If the administration of Russian Web sites Is concentrated In the hands of a gov- 
ernment agency. It could have chilling effects on Independent-minded online media 
and bloggers. 

In the past few years, Russia's government has recognized the need to develop a 
favorable environment for Information technology by providing legal and tax Incen- 
tives for companies In this market. The development of the 1CT sector has risen to 
become a national policy priority. Yet. while the government Is hoping to attract for- 
eign investment, It Is not ready to abandon centralized decision making and end Its 
monitoring of ISPs. 

Surveillance 

The Russian government has been advancing justifications for surveillance, ostensibly 
to aid In the investigation of crimes and the prevention of terrorism. The Law on 
Systems for Operational Investigation Activity (SORM)“ of 199S authorized the FSB 
monitoring of telecommunication transmission. In 1999, formulated as an amend- 
ment to SORM, SORM-D was enacted to allow for the monitoring of Internet traffic. 
SORM-I1 Is sdll effective and "reinforced." and In April 2008, Leonid Reiman, the Min- 
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Ister of Communications, signed an order that essentially restated the obligations of 
ISPs under SORM-U to allow monltonng of users’ Internet activities. 

Under SORM-11, ISPs are required to provide the FSB with statistics on all Internet 
traffic that passes through their servers. In addition, ISPs are required to Install moni- 
toring devices on their servers and route all transmissions in real time through the 
FSB’s local offices, which would allow the FSB to track all users' transactions, e-mall 
communications, and online browsing. Even though the FSB still needs to obtain a 
warrant to read the contents, many doubt that they would obtain the warrant before- 
hand consistently, since there is no mechanism to prevent the FSB from having unau- 
thorized access. Providers must also provide the FSB with Information on users' names, 
telephone numbers, e-mail addresses, one or more IP addresses, key words, user Identi- 
fication numbers, and users’ ICQ number (Instant messaging dlent), among others. 

Under Putin, Minister of Communications Reiman entered an order slating that the 
FSB officials shall not provide Information to the ISPs either on users who are being 
Investigated or regarding the decision on the grounds of which such investigations 
are made.®* Consequently, this Order offered a "carte blanche" to the Special Services 
to police the activities of Internet users without supplying any further Information to 
the provider or any other Interested party. 

Only a few days after assuming office. President Putin expanded the list of state 
agencies that can monitor communications under SORM to Include the tax police. 
Ministry of Internal Affairs, border Guards, Kremlin Security Service, Presidential Secu- 
rity Service, parliamentary security services, and Foreign Intelligence Service. 

SORM places the substantial financial burden of Installing routers on the FSB servers 
on the balance sheets of ISPs, with minimal benefit to them for the technology. The 
cost of equipment at the time the regulation was adopted was dose to USD 25 , 000 .™ 
This expense has caused many small and independent ISPs to shut down. In one 
recorded case a small regional ISP In Volgograd, Bayard-Slavlya Communications, 
resisted the new law and refused to Install the required equipment. As a result, the 
Ministry of Communications suspended the provider’s license. However, when the ISP 
brought the question to court, the ministry renewed its license. 

SORM-11 drastically expanded the ability of the FSB to carry out surveillance of oper- 
ators and Individuals. Some reports reveal that ISP owners prefer to negotiate their own 
confidential agreements with the FSB office rather than take on the cost of complying 
with SORM-11 or risk losing their licenses. 71 

In reality, however, many doubt that the FSB possesses the capability of monitoring 
all Internet traffic. 72 Increased Internet traffic renders ubiquitous surveillance practi- 
cally Impossible. Unless the authorities know ahead of time what they are searching 
for, random surveillance Is unlikely to produce any meaningful results/ 3 Nevertheless, 
as there Is no Independent authority that controls or supervises the FSB, their activities 
are not publicly known. 
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ONI Testing Results 


The OpenNet Initiative tested from different locations and several access points on a 
number of main ISPs In the major cities and regions. The ONI tested on the following 
ISPs: AltalTelecom, ASN-Yaxtdecom, Comstar, Corvette. Metrocom. North-West Tele- 
com (ASN SPBNIT). Rosnet, RlNet, St. Petersburg State University (ASN-SPBGU), and 
Wlland. The ONI found first-generation filtering that targeted erotic and pornographic 
content Second-generation filtering methods were largely undetected by the ONI, as 
they occur only during significant political events. The ONI did not monitor the 2007 
parliamentary or 2008 presidential elections, during which numerous instances of 
second-generation and third-generation controls were reported in the Russian and 
foreign press. 

Conclusion 

Control of media has a long-established history In Russia. As the Internet has prolifer- 
ated, the government has moved to design suitable control mechanisms. Compared to 
other countries, the Russian approach represents a notably different method of con- 
trolling Internet activity. Instead of utilizing Chlnese-style filtering to control Internet 
access, the Russian government prefers to employ second- and third-generation tech- 
niques such as legal and technical Instruments and national Information campaigns 
to shape the Information environment and stifle dissent and opposition. 

As many countries around the world struggle with Internet regulation. It Is likely 
that this Russian model will be emulated by other governments, in the CIS and beyond. 
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Intemcl access In Tajikistan remains 
largely unreslrlcled. but emerging 
second-generation controls have 
threatened to erode these freedoms 
just as Internet penetration Is starting 
to have an Impact on political life In 
the country. In the run-up to the 2006 
presidential elections. ISPs were asked 
to voluntarily censor access to an op- 
position Web site, and recently other 

second-generation controls have begun to emerge. Internet penetration remains 
low because of widespread poverty and the relatively high cost of Internet access. 






Background 

Tajikistan constitutional law gives the president unprecedented authority over the 
media. The Incumbent president, Emomali Rahmon, who Is presently in his third 
seven-year mandate, 1 suppresses opposition through prosecutions based on broad and 
inconsistent interpretations of Tajik laws* Three of Tajikistan’s eight political parties 
are represented In parliament, but few are |>olltlcally active because of the Increasingly* 
authoritarian practices of the regime.* 
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1 KEY INDICATORS ft 

COP per capita, PPP (constant 2005 international dollars) 

1,657 

Life expectancy at birth (years) 

67 

Literacy rate (percent of people age 15+) 

100 

Human development index (out of 1 79) 

124 

Rule erf law (out of 211) 

188 

Voice and accountability (out of 209) 

186 

Democracy index (out of 1 67) 

150 (Authoritarian regime) 

Digital opportunity index (out of 1 81 ) 

143 

Internet users (percent of population) 

6.6 


Source by inrfcator World Bank 2009a, World Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economist Inteftgence Unit 2006, ITU 2007, MMwatb Marketing 
Grot*> 2009. 


Government claims of an Improving economic and political situation and investor 
confidence In the telecommunications and Internet market 4 are difficult to substantiate 
given that the majority of the population live below the poverty line. 4 The unemploy- 
ment rate Is high, and remittances from economic migrants form the backbone of the 
economy. According to World Bank statistics. In 2008 Tajikistan received USD 1.2S bil- 
lion in remittances from workers abroad, while unofficial sources claim that this figure 
amounts to 60 percent of the country's GDP.® 

Opposition parties are only beginning to explore the Internet's potential. In part 
owing to the low levels of Internet penetration throughout the country. None of the 
registered opposition parties have domain names registered In the ",t|" Internet zone, 
and only one party has Its Web site available In Ta|lk. 7 

Internet In Tajikistan 

The Internet In Tajikistan emerged as the country was ending a Woody* civil war that 
followed the demise of Soviet rule in the early 1990s. The resulting fragmentation of 
power also meant that Internet services developed largely without state interference 
and the Ministry of Transport and Communications played a weak role in the develop- 
ment of the sector as a whole. Telecommunications remained fragmented up until the 
end of the 1990s, with several companies falling to Interconnect because of fierce (and 
at times violent and armed) competition. During this period of Instability, ISPs were 
aligned with feuding political and criminal Interests that spilled over to the competi- 
tion among the ISPs themselves. 

Since the end of the civil war, the government has taken steps to attract Investors 
and liberalize the sector prompted by expectations of accession to the WTO. However, 
Important steps are still pending, such as the privatization of Tajlktelecom (the na- 
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tlonal operator) and the establishment of an Independent regulatory authonty. 8 In 
recent years, the telecommunications sector has boosted Tajikistan's GDP, and the 
number of licensed Internet and mobile operators has been Increasing. In 2008, more 
than 180 companies were licensed In the 1CT market* 

Internet penetration in Tajikistan Is estimated at 6.6 percent (2008).'° In 2009, the 
cost of accessing the Internet Increased, further restricting development of the sector. 
Access costs of USD 73 per hour at Internet cafes and up to USD 300 for unlimited 
Wl-FI traffic compare poorly with average wages of USD 35 per month and a minimum 
salary of USD 7 per month. The price for one hour of Internet access In Internet cates 
Is USD 0.73; unlimited monthly traffic by dial-up access costs USD 26.41; xDSL with 
capacity of 128/64 Kbps amounts to USD 200; and Wl-Fl unlimited traffic per month 
with the same capacity Is USD 300. «' 

One respected Tajik NGO estimates that 1 percent of households own personal 
computers and that most people access the Internet from home by way of dial-up 
connections. 12 Access with DSL and wireless (Wl-Fl and W1MAX) technologies Is lim- 
ited by relatively’ high costs, and therefore restricted to a small number of commercial 
companies. 

In 2009, there are ten main ISPs In Tajikistan actively providing Internet services to 
all major cities in the country. 11 The state-owned telecommunications company Ta|lk- 
telecom, which provides local, long-distance, and International telephone, mobile tele- 
phony, and Internet services, lost Its umlvaled dominance of the telecoms market in 
2007, when Babllon-Moblle seized more than 30 percent of the market. 

Tajikistan remains dependent on satellite-based connections, as the cost of fiber re- 
mains high — approximately 30 percent higher than using the same-capacity channel 
over VSAT. The country Is connected to the Trans-Asla-Europe (TAE) U fiber-optic high- 
way passing through Uzbekistan, and a second connection Is under construction to 
Kyrgyzstan. In part to overcome this bottleneck, both Ta|lktelecom and Babllon-T 
have an ambitious plan to expand their fiber-optic Infrastructure across the country 
and establish connections with China. 14 

The ISPs are reluctant to share Information about their bandwidth because of the 
concern that the data would be used by their competitors to undermine their market 
position. They are also reluctant to discuss their International points of connection 
from which they buy bandwidth. The ONI data reveal that with the exception of 
TARENA (an educational network), all Tajik ISPs maintained two International points 
of access, one located in Russia and the other In Western Euroj>e. Tajik providers are 
aggressive In adopting new technologies. Three of the o|>erators, Babllon-T, Telecom 
Technology, and Eastera, provide a commercial Next Generation Network (NGN) 
service. 16 

In 2005, the Association of Tajik ISPs established a national Internet exchange point 
(IXP) that connected only four of the ten commercial ISPs (Babllon-T, Compuworld, 
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Eastera. and MKF Networks), as well as TARENA. 17 At the time of wilting, the 1XP Is 
not operational as ISPs prefer to maintain bilateral peering connections between 
them. 

Most Internet users are young and access the Internet through Internet cafes close to 
schools and universities. In January 2006, the Ministry of Transport and Communi- 
cations estimated that some 400 Internet cafes, mostly concentrated In large cities, 
operated in the country. Many Internet cafes act as second-tier ISPs and buy their 
bandwidth from the first-level ISPs (l.e., main ISPs In the country with Independent 
International connection). Recent changes in licensing regulations require Internet 
caffs operating as ISPs to obtain a license from the Ministry, a requirement which has 
brought about a decrease of the overall number of Internet caffs. 1 * 

Although more than 70 percent of the population resides In rural areas, Internet 
access Is mainly restricted to urban areas because of poor Infrastructure and low afford- 
ability. A 200S study by the local Civil Initiative on Internet Policy (CIPI) shows a great 
disparity between the percentage of men accessing Internet (77.S) and that of women 
(22.S). 1 ’ About 12 percent of users are secondary school students, with around 100 
schools across the country connected to the Internet. The most active users are univer- 
sity students, employees of International organizations, commercial companies, and 
public sector institutions. 

Ta|lk Is the official national language. Nevertheless, Russian remains the most popu- 
lar language for Internet use. According to data obtained from the national Informa- 
tion portal (TopTJ.com), the top-ten most-vlslted Web sites In October 2007 were 
informational and analytical portals (AslaPlus, Varorud, Watanweb, An ana), a commer- 
cial bank, and entertainment sites. Other popular Web sites Include mall.ru; popular 
research engines are rambler.ru, google.com, yahoo.com, and yandex.ru. Among Tajik 
youth, the most popular applications Include Instant messenger, followed by social 
networking sites (odnokassnlkl.ru, my.mall.ru), and online educational resources. 

Local Tajik content on the Internet Is poorly* developed. Most Internet content Is 
available In Russian, but the knowledge of Russian among the younger generation is 
gradually decreasing. A survey conducted among 342 students and professors from nine 
universities showed 60 percent of respondents saw the Internet as an informational 
and educational resource, but not as a means to create local Information resources. 70 

The Tajik top-level domain name was registered with the Internet Assigned Numbers 
Authority (IANA) In 1997, but the domain name was later suspended because It was 
used mainly for registering pornography sites. In 2003, the domain name registration 
was delegated to the Information and Technical Center of the President of Tajikistan 
Administration, a state entity that now supervises registrations within the ".t|" do- 
main. 21 Any operator that has a license for providing telecommunication services 
(including Internet) is eligible to act as a domain registrar. By January 19, 2008, 4,894 
second-level domain names were registered within the “.tj" domain. 22 
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Legal and Regulatory Frameworks 

All Ta|ik ISPs operate under a license from the Tajik Ministry of Transport and Com- 
munication. Internet service providers are permitted to operate VoIP services under an 
IP-telephony license, although the ministry has Introduced amendments that require 
VoIP providers to obtain a special license, presumably as a means to further regulate 
the sector. 21 In Tajikistan, P2P services are not popular, and the government has not 
shown ambitions to regulate them at this time. 

The main state entitles regulating the Internet in Tajikistan are the Security Council 
(SC), the ICT Council, and the MTC (an entity established In February 2007, replacing 
the former Ministry of Communications). The Communications and Informatization 
Department of the MTC Is the main regulator In the telecommunications industry 
and Is empowered to Issue licenses for any related activities. 24 In 2003, the government 
adopted the Conception on Information Security, 24 which serves as a platform for pro- 
claiming official views and policy directions to preserve state Information security. 

The president remains the key authority that ratifies the main legal documents in 
the IT sector and directs ICT policy In the country. The SC controls the Implemen- 
tation of the State Strategy on Information and Communication Technologies for 
Development of the Republic of Tajikistan (e-Strategy) “ aimed at developing the 
information society and exploiting the country's ICT potential. The SC monitors tele- 
communications, including the Internet, for national security reasons. The ICT Coun- 
cil, 27 where the president sits as chairman alongside members of the government. Is 
responsible for implementing and coordinating work under the e -Strategy and advising 
the president. However, although the council was established In February 2006, It has 
yet to be convened. 

The government restricts the distribution of state secrets and other privileged data 
intending to "discredit the dignity and honor of the state and the President." or 
that which contains “violence and cruelty, racial, national and religious hostility ... 
pornography . . . and any other Information prohibited by law." 28 The provisions of 
this regulation are broad and allow state bodies wide discretion In their application. 
The control over information security Is assigned to the Main Department of State 
Secrets and the Ministry of Security. 

The lower chamber (Majlis! Namoyandagon) and the president ratified the Law on 
Changes and Amendments to the Criminal Code In June and July 2007, respectively. 
The changes Introduced, Inter alia, provisions on defamation (Article 13S, part 2, Slan- 
der) and provisions on Illegal collection and distribution of private data (Article 144, 
part 1). Defamation Incurred over "mass media or Internet" Is prosecuted according to 
local laws when It contains "Intentional distribution via the Internet of knowingly 
false, libelous and Insulting Information, as well as expletive words and phrases which 
denigrate the dignity of human personality." 
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Tajikistan does not have an official policy on Internet filtering. However, state 
authorities have been known to restrict access to some Web sites at politically sensitive 
times by communicating their "recommendations" to all top-level ISPs — an example 
of second-generation controls. Prior to the 2006 presidential election, the govern- 
ment-controlled Communications Regulation Agency Issued a "Recommendation on 
Filtering" that advised ISPs that, "for the purpose of Information security," they should 
"engage In filtering and block access to Web sites that aim to undermine the state 
policy In the sphere of Information." 29 As a result, several oppositional news Web sites 
hosted In Russia or Tajikistan were Inaccessible to Tajik users for several days. 30 Al- 
though officials offered unclear reasons for shutting down the Web sites. Independent 
media sources believe that the block fist will grow in the future. 3 ' 

Surveillance 

Several government agencies possess the right to inspect ISPs' activities and premises, 
and require Information on their users. The rights and obligations of ISPs In this regard 
are envisioned In the Annex to the "Internet Services Provision Rules within the 
Republic of Tajikistan" (herein refened to as the Rules). According to Section 4, para- 
graph IS, of the Rules, the provider Is obliged to "render Its activity’ In accordance 
with the current Rules" and "provide an easy access to Its facilities for employees of 
the State Communications Inspectorate of the Ministry of Transport and Communica- 
tions, Ministry of Security and other state agencies granted under the corresponding 
rules, provide on their demand Information, for which they are authorized to ask and 
fulfill their instructions on time." 

In 2006, the government signaled its intention to create an agency under the aus- 
pices of the Ministry of Transport and Communications that would control the 
ISP sector. All telecoms and ISPs were required to provide direct access to the state 
inspectorate In a manner similar to Russian surveillance legislation (SORM). In 2009, 
the high cost of the project as well as lobbying from telecom operators halted Its 
realization. 3 * 


ONI Testing Results 

In 2007 and 2008, the OpenNet Initiative tested in Tajikistan on four key ISPs: Babllon-T, 
Eastern. Tajlktelecom, and TARENA- Testing In Tajikistan yielded no evidence of Inter- 
net filtering. This extends to pornographic content, and with the exception of TARENA 
(which services schools and universities), the ma|ot ISPs do not filter such content on 
the backbone level. However, accessing pornographic content at Internet cates Is Ille- 
gal. Any persons caught accessing such content Is sub|ed to a fine ranging from USD 
IS to USD 100, and violators may be criminally prosecuted. The ONTs Investigation 
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concluded that currently most Internet cates do not filter access to pornographic con- 
tent. However, they do employ monitoring software that notifies them when a client Is 
attempting to retrieve such content. 

Conclusion 

The Ta|lk government has adopted an e-strategy aimed at developing an Information 
society and employing 1CT potential for spurring economic growth. At the same time 
It does not seek to encourage Independent online publishers, journalists, and bloggers. 
Media freedom Is widely challenged and subject to de facto censorship, although the 
constitution provides that "state censorship and prosecution for criticism are forbid- 
den."** State filtering Is unlikely to be officially supported as ISPs remain Independent, 
often linked to political or criminal interests with influence within state bodies. Tajiki- 
stan Is also dependent on International aid, which has some Influence over the direc- 
tion of state policy in this sector, although this may change as Tajikistan moves closer 
to the Shanghai Cooperation Organization (discussed further below). The Tajik govern- 
ment, however, has In place policies and Instruments to maintain firm control over the 
distribution of information, particularly before elections. The government Is engaged 
In developing programs aimed at restricting citizens’ Internet access, following on 
from President Rahmon's message that "Western values aren't always applicable" to 
Eastern countries.* 4 

Future tendencies on the political agenda include the Increasing role of regional 
organizations such as the Shanghai Cooperation Organization and the Eurasian Eco- 
nomic Union, which may lead to a harmonization of more repressive laws. This possi- 
bility combined with the regime's authoritarian tendencies may lead to the emergence 
of further second-generation controls (especially event-driven filtering and legal restric- 
tions on categories of content). 
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Turkmenistan 


Turkmenistan ranks among the most 
repressive and closed societies In the 
world. The Internet Is heavily regu- 
lated and available only to a small 
fraction of the population. Among 
the countries of the CIS, It has the 
lowest penetration rate of Internet ac- 
cess and the highest degree of first- 
generation controls. Censorship Is 
ubiquitous and extensive. Surveil- 
lance Is significant, and the few dtlze 
are closely monitored by state agencies 



who benefit from access to the Internet 


Background 

A Central Aslan republic with a population of around S million and land area of 
488,100 square kilometers, 1 Turkmenistan Is a country rich in natural gas and oil 
resources. 2 The government has undertaken efforts to develop the gas and cotton in- 
dustry but has failed to encourage development In other economic sectors. 

Turkmenistan was a closed society under the proclaimed "President for life," Sapar- 
murat Nlyazov. 3 To nourish his personality cult, Nlyazov — In power for 15 years — 
frequently rotated, dismissed, or brought charges against government officials and 
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1 KEY INDICATORS A 

GDP per capita. PPP (constant 2005 international dollars) 

4.677 

Life expectancy at birth (years) 

63 

Literacy rate (percent of people age 15+) 

100 

Human development index (out c4 1 79) 

108 

Rule erf law (out of 211) 

195 

Voice and accountaMity (out of 209) 

205 

Democracy index (out of 1 67) 

165 (Authoritarian regime) 

Digital opportunity index (out of 1 81 ) 

139 

Internet users (percent of popUaticn) 

1.4 


Source by irxfcator World Bank 2009a. World Bank 2009a, World Bank 2009a. UNDP 2008. World 
Bank 2009b. World Bank 2009b, Economist InteKgence Unit 2008. ITU 2007. Mnrwatts Marketing 
Group 2009. 


judicial representatives to create a situation of permanent Instability In the society * 
The death of NIyazov In December 2006 brought about a glimmer of hope for those 
pining for reform. 4 In February 2007, Gurbanguly Berdymukhamedov won the coun- 
try’s largely symbolic presidential elections. The post-Nlyazov transition was surpris- 
ingly smooth, with Berdymukhamedov promptly securing support from the most 
Important behind-the-scenes players, whom he then removed once becoming presi- 
dent. Durtng the time of NIyazov, the president headed both the legislative and Judi- 
cial branches of the state. Berdymukhamedov pledged to Introduce democratic 
reforms and separation of powers. In September 2008, a new constitution entered Into 
force that dissolved the People’s Council (the highest representative body, which 
Included parliament and cabinet members) and divided Its powers between the presi- 
dent and the new 12 S-member parliament. 

During NlyazoVs rule, all opposition parties were banned. Dissenters were harassed 
or exiled, and a small and weakened opposition existed either underground or abroad. 6 
By contrast, the new constitution promotes multiparty politics, thus formally legaliz- 
ing opposition. However, In the 2008 parliamentary’ elections, the Democratic Party — 
the current ruling party — was the only one registered to participate. The leaders of the 
main political opposition parties — the Social and Political Movement of Watan and 
the Turkmenistan Republican Party — continue to reside abroad to avoid potential 
repression. 

The people of Turkmenistan were positive about some of the reforms promised by 
Berdymukhamedov, Including reinstating the recently abolished ten-year mandatory 
period of education, reversing measures aimed at denying pensions for the elderly, 
and guaranteeing Internet access to all. 7 

The ethnic composition of the population Is Turkmen (8S percent), Russian (7 per- 
cent), Uzbek (5 percent), and other mlnontles (3 percent). 8 The largest percentage of 
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the population shares orthodox Turkmen and Islamic values (89 percent), although 
Muslim traditions have been, to some extent, modulated by local customs and the 
country's Soviet past. Important factors In determining one’s position in the Turkmen 
society remain kinship, regional links, and tribal affiliation. The state traditionally mar- 
ginalizes ethnic and religious groups. Except for officially recognized Sunni Muslim 
and Russian Orthodox denominations, religious activities are severely limited. Religious 
congregations are required to register with the government to gain legal status. 9 

Internet Infrastructure 

The telecommunications sector in Turkmenistan is developing slowly, encumbered by 
heavy government subsidies of basic services, contradictory procedures for obtaining 
licenses, and low levels of foreign investment. 10 In the late 1990s, two German compa- 
nies, Siemens and Alcatel, were approved by the government to develop the telecom- 
munications system. In addition, the TurkmenTelecom Company and the Ui. -based 
Verizon have agreed to provide Turkmenistan with direct access to the Internet." Chi- 
nese telecommunication companies, financially supported by the Chinese govern- 
ment, have also entered the market. According to the U.S. Embassy In Turkmenistan, 
prior to 2004 there were no broadband fixed wireless service providers In the country, 
and the difficulties Involved in obtaining operating licenses from the Ministry of Com- 
munications made the involvement of foreign companies impossible." 

Since the emergence of the Internet, the government has sought to establish com- 
plete control of the Internet to avoid any potential threat that unmonltored access 
may pose to the regime. In 2001, the largest ISP, Arlana, struggled to survive for 
months while appealing the revocation of Its license. It continued to provide free Inter- 
net access to NGOs until the government finally closed It down. Thereafter, only the 
state-run provider, TurkmenTelecom, continued operations. Under the former admin- 
istration, there was very little public Internet access. It was available only to those who 
could afford to pay USD 8 per hour at the few hotels catering to foreigners and less 
than ten public access points In the country, all sponsored by foreign aid programs. 
Private use was restricted to a few foreign -owned businesses that could acquire two- 
way satellites or the few USD 1,000 a month DSL lines, a few dozen universities and 
institutions connected through the NATO-established Virtual Silk Highway pro|ect, 
and a small number of local Individuals and businesses that managed to acquire 
dial-up access accounts. ,s 

There Is only one legal provider of Internet In T\ukmenlstan, the official government 
body. TurkmenTelecom. All channels pass through TXukmenTelecom's central hub, and 
all are thoroughly monitored by the security services. TurkmenTelecom offers a small 
range of service connections for individuals and organizations, all of which are offi- 
cially limited to the holder of the account. It remains Illegal for a private organization. 
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for-profit or otherwise, to open an Internet caff. Should an organization manage to 
acquire a dial-up account. It would be presented with a contract obligating It to use 
the account solely for private personal use and not to share It with anyone. Those In 
breach of the rules are sanctioned. 

In order to receive Internet access, users must register with TurkmenTelecom by sub- 
mitting a declaration and their passport. In addition, TurkmenTelecom warns users on 
Its Web site that the Internet Is not a "place for unconsidered behavior." Accordingly, 
users have to refrain from undertaking a wide array of broadly defined activities when 
they are online — for example, posting materials containing foul language, showing 
"Inappropriate behavior" online, posting Information that conflicts with the standard 
norms of behavior and legislation, and uploading pornographic materials. 11 The con- 
tract signed by the operator and user contains even more restrictions, such as a ban 
on accessing Web sites that contain violent content and Web sites that disseminate 
“untruthful and defamatory Information" (a definition that Includes opposition Web 
sites). If, after a warning, a user insists on accessing forbidden Web sites, the operator 
shuts down his or her Internet service. Users are liable for any actions that might cause 
damage to the government or "anyone else." 

Foreign aid organizations and expensive hotels continue to provide Internet access, 
though there Is consensus among users that the speed of connections provided by 
TurkmenTelecom has declined over the last two years. These organizations and hotels, 
as a self-imposed measure, filter some opposition and freedom-of-expresslon Web sites. 
They defend such policies as necessary In order for them to continue providing Inter- 
net services. Their activities, as well as those of their patrons, continue to be monitored 
by the authorities. 

Similar self-censorship behavior has been observed In schools. After N'lyazov's death, 
the new president promised to Install Internet access In every school and demanded 
that no new school or kindergarten be opened without Internet access. 14 This massive 
state computerization program led to the purchase of thousands of computers for the 
country's schools. However, lack of training in 1CT among teachers and remaining 
fears among administrators that access to the Internet may lead to repression have left 
many of the computer rooms locked. 

The results of the computerization program have been far more modest than the 
rhetoric behind It, and the country has largely failed to Implement policies guarantee- 
ing free and accessible Internet. The president legalized Internet cates in 2007, but they 
continue to number only a few, are not advanced technologically, and are closely 
monitored by the state security service. 16 Since February 2007, IS TurkmenTelecom- 
operated Internet cafe have been opened in the country's six largest cities. 17 Their 
hours of operation were limited to normal government business hours, and the 
price in 2007 was set at about USD 4 per hour (at this time the average salary In 
Turkmenistan was less than USD 100 a month). 18 All Internet cate users are required 
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to present a passport, and their activities are recorded and logs are sent to a govern- 
ment server. 

Nearly two years after the transition several of the IS official access points were 
closed, and all have suffered repeated service outages and closures. In 2007, President 
Berdymukhamedov reprimanded the minister of communications for the high prices 
at Internet cafes. 19 As a consequence, access prices dropped by more than 60 percent, 
and Internet access at Internet cafes now costs around USD 2. Aside from the obvious 
submission to monitoring Inherent In presenting one’s passport, Internet cafes are 
staffed mostly by youth; furthermore, anyone who uses an Internet cafe Is mindful of 
what he or she accesses. Nevertheless, administrators report that most Internet caffs re- 
ceive only up to ten visitors a day. 

Contact with the outside world Is still difficult in Turkmenistan. Prices for home 
access to the Internet are steep, creating an additional economic barrier to widespread 
Internet use. Thus, the Internet largely’ remains a privilege to those working for foreign 
companies, the government, and, In a small number of cases, those studying or work- 
ing at universities. International organizations are trying to Improve the local climate 
by providing regional centers and administrations with modem computer equipment 
and Internet access, as well as establishing satellite connections of Turkmen science 
centers to the worldwide network.* 0 

In March 2008, the official government Web site Turkmenlstan.ru announced that 
TurkmenTelecom was finally offering dial-up home Internet connection to the public. 
The rates were set at USD 42 to open an account, a flat USD 5 per month fee, and USD 
4 per hour for browsing, with speeds of 4S Kbps. 21 These rates are unaffordable for the 
vast majority of the population and more than six times higher than In neighboring 
Uzbekistan. New leased lines were also to be connected starting Immediately’, at high 
monthly rates of USD 1,000-USD 2,000. 

Internet use in the CIS region has increased significantly In the last several years in 
all countnes except for Turkmenistan. Various attempts at measuring Internet penetra- 
tion have posited that between 0.17 and 4 percent of the population use the Internet, 
with ITU estimates being 1.4 percent. » Notwithstanding the low level of penetration, 
the number of users has increased significantly since the offer of home Internet access. 
Fixed-line penetration Is less than 10 percent, with negligible broadband. Permission 
has now been given for broadband national WiMAX frequencies. There are fewer than 
500 Web sites hosted in the country under the top-level domain "tm," more than half 
by a foreign-funded development project. The rest consist almost entirely of official 
Web sites of government entitles. Nearly 95 percent of regular Internet users are in 
the capital, Ashgabat. 

There are two mobile operators In the country. Atlyn Asyr Is wholly controlled by 
the state, with roughly 160,000 subscribers. In November 2007, MTS, a Russian mobile 
service provider <100 percent privately owned), began offering GPRS/RDGE service to 
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Its corporate clients In Turkmenistan. In May 2008, the same service was ottered to 
individual users for USD SO/Mbtt plus a one-time fee of USD 5. As of 2008, MTS had 
around S00.000 users In Turkmenistan. 23 The service provided by MTS Is considerably 
cheaper than TUrkmenTelecom’s: It costs USD S to connect (one-time fee); 1 MB Is S8 
cents (day) and 29 cents (night). For users who live in rural areas where fixed lines are 
not modernized, MTS remains the only option to connect to the Internet. Interest- 
ingly, MTS's Introduction of GPRS Internet seems not to have been supported by the 
government, and the service was never announced In official media. The price is 
still quite high for most users, the service slow and unreliable, and Internet traffic still 
monitored and filtered through TurkmenTelecom. Focusing on GPRS, however, would 
herald a leap forward In public access to the Internet, bypassing the high-cost infra- 
structure of land and telephone lines. If the state does not encourage the establishment 
of Independent networks, however, the service could remain slow, expensive, and 
unreliable, and will most likely remain filtered.** 

Turkmenistan recently sold the rights of administration of top-level ".tm" domains 
to a U.S.-based contractor. Foreign companies are willing to pay high prices for ".tm" 
domain names because the abbreviation evokes the term "trademark." The vast major- 
ity of Turkmenistan-based Web sites are within second-level domains of International 
or official government bureaus, such as ".gov.tm" or ".edu.tm." 

Legal and Regulatory Frameworks 

The president and the Cabinet of Ministers are the policymakers In the communi- 
cations sector. The Ministry of Communications implements policy; It Is the sector's 
regulator, issuing licenses to operators, approving tariffs, and carrying out Investiga- 
tions to ensure that operators conform to all laws and regulations. The ministry super- 
vises eight bodies In the post and telecommunications sectors: TurkmenTelecom (fixed 
operator), Ashgabat City Network, Altyn Asyr (GSM), TV Radlo/TV Broadcasting. Spec- 
trum Administration, Turkmenistan Post. Special Delivery service (Postal), and Train- 
ing Center. The deputy chairman of the Cabinet of Ministers oversees the work of the 
ministry and the minister of communications reports directly to him. 24 

The role of the sector minister In controlling the state operator is de facto marginal 
as the general director of TurkmenTelecom reports directly to the Cabinet of Ministers 
without referring to the minister. The Internet market is strictly controlled by the 
Cabinet of Ministers, and receiving an Internet license entails dose monitoring of all 
providers' commercial activities. Each license Is for a period of three years, and there 
are more than 30 different license types In the communications sector. It Is anticipated 
that revisions will be Introduced to the Law on Communications (2000), which would 
provide easier conditions for new technologies to enter the market. President Berdymu- 
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khamedov has encouraged some Liberalization In the market by allowing alternative 
Internet operators to apply lor licenses. In fact, by law. the state operator does not en- 
joy exclusive rights. Nonetheless, TurkmenTelecom remains the only ISP In the market 
with a valid license to operate. The tariffs are set by the operators themselves, while the 
ministry reviews the tariff proposals when granting the license. 

According to existing rules, when an alternative ISP or broadband provider expresses 
an interest in using an incumbent operator's network, an Inspection commission Is 
formed to investigate the operator’s proposal. However, as yet, no alternative provider 
Is known to have applied to provide such services. 2 * 

Although both the old and the new constitutions guarantee freedom of expression 
and free dissemination of Information, the government largely controls all media out- 
lets (television, press, and radio). The Turkmen television Is state-owned and provides 
four channels. Channel One, or ORT, broadcasts of Russian television are restricted to 
only two hours per day and rarely broadcast live. Any reference related to the Soviet 
past, erotic topics, prostitution, alcoholism, or drug addiction Is removed from movies 
and soap operas. 27 Foreign television stations and radio are accessible only to the hand- 
ful of people who have satellite dishes or shortwave radios. The press Is controlled 
by the government, and even the nominally independent newspapers AJalat and 
Calkynysh were created by decrees of the former president. Other government- 
approved newspapers are Turkmenistan (published in Turkmen) and Neutral Turkmeni- 
stan (in Russian). 

Publishing houses and photocopying establishments have to receive registration 
licenses from the government before starting their operations. 28 State media employees 
cannot establish contacts freely with foreign media. 

The lack of mechanisms guaranteeing media freedom, the extensive provisions sanc- 
tioning libel and defamation in the Criminal Code, and the broad provisions related to 
terrorist activities In the Law on Terrorism 29 have Imposed total self-censorship on 
Turkmen society under the former and current governments. Article 132 of the Crimi- 
nal Code makes libel by way of channels of mass information punishable by fines, up 
to two years of forced labor, or up to one year In prison. Article 133 of the Criminal 
Code provides for similar sanctions for certain insults against government agents 
(who are defined as anyone who permanently or temporarily represents a branch 
of the government). Article 176 of the Criminal Code seeks to protect the president. 
Under part 1, any attempts on the life or health of the president are punishable by 
Imprisonment for life or death. Part 2 of this article provides for a prison term of up 
to five years for libel directed against the president. No specific mention Is made of 
mass media — libel In any form can lead to charges. 10 Libel charges are usually used to 
arrest journalists, and there Is always a danger of false charges being laid for crimes 
such as embezzlement. 
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As reported by Radio Free Europe, during the previous regime most of the trials 
of journalists, government opponents, or any person who was considered a "threat" 
to the regime were held In secrecy . 11 Under Nlyazov, repression of dissenters in Turk- 
menistan often involved beatings, threats, and arrests . 12 The current president has 
granted amnesty to many dissidents and journalists who were (ailed by the Nlyazov 
regime . 11 However, In spite of the few positive steps taken by President Berdymukha- 
medov, media groups continue to place Turkmenistan among the "ten worst countries 
to be a blogger" because of the lack of guarantees for freedom of expression . 14 

Surveillance 

In Turkmenistan, few users with access to the Internet are able to read English. Accord- 
ingly, only Information In Russian disseminated on the Internet might raise serious 
concerns for the regime. Nonetheless, the preferred method of limiting Information 
on the Internet Is simply blocking undesirable content. Such a policy, documented 
during Nlyazov’s reign, Is still In place. 

Reporters Without Borders has declared Turkmenistan, along with Belarus and Uzbe- 
kistan, an "Enemy of the Internet," because of a combination of monitoring Internet 
browsing, filtering Web content, imprisonment, harassment, and the prevention of the 
posting of political materials . 15 

The Turkmen government maintains tight control on the flow of information 
through the official mass media. Any dissident criticizing the lack of expression and 
tight censorship Is likely to be Included In the government-held blacklist, which can 
restrict the right to travel abroad . 16 Authorities remain hostile to religious sects, and 
unregistered religious groups are still not allowed to perform religious activities. The 
government Is also engaged In a long-standing practice of deporting citizens belonging 
to different religious sects . 17 There has been no stark change in the monitoring and 
Interception of communications over the last two years. Sensitive Issues such as dis- 
crimination against women, terrorism, religious extremism, and separatism are still 
censored by the government. Because of the overall restrictive climate, people commit 
themselves to broad self-censorship. 

There are reports that Turkmenistan's security services have put into place a system for 
Internet surveillance of all ISPs throughout the country . 18 The OpenNet Initiative sus- 
pects that an automatic Internet surveillance and filtering system based on deep- 
packet-inspection technology has been Installed on TurkmenTelecom routers. Since all 
Incoming and outgoing Information passes through TurkmenTelecom systems, Internet 
traffic can easily be Intercepted. Any traffic can be monitored by authorities, and cer- 
tain preselected Web sites containing Information that could be harmful to the regime 
are filtered. Other reports confirm that users can be Identified If they send encrypted 
messages and materials containing certain keywords, such as the president's name . 19 
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ONI Testing Results 

In 2008. OpenNet Initiative testing was condutted in Turkmenistan on a direct land- 
line connection to TurkmenTelecom. The tests detected substantial bitering ol local 
and regional media and freedom-of-expresslon Web sites. Significantly, Azeri media 
sites. Including a popular multimedia site with an ".az" extension and an Azeri Web 
site targeting corrupt officials. were blocked. The ONI revealed targeted filtering on a 
number of other Web sites Including those covering local and International women’s 
rights, human rights, and narcotics, and one Web site containing Information about 
religious beliefs. An environmental site and a P2P site were also blocked. In addition, 
a number of pornographic and gambling sites were blocked. The ONI also observed 
reverse filtering of U.S. military domains. 40 

Conclusion 

The former Turkmen president exercised strict control over Turkmen society and 
media, and restricted any information inconsistent with his widely propagandized 
policies. The current president has pledged to seek a more lenient approach to leading 
the country, but much still remains to be done. The scope of sensitive Issues In Turk- 
menistan continues to be broad and may involve any cntlclsm of the regime or Inde- 
pendent opinion. Few citizens have access to the Internet, and most continue to fear 
censorship and other unpredictable centralized methods of control. Until liberalization 
of the Internet market occurs, such measures will continue to be a concern for most 
Internet users In the country. The few International organizations providing Internet 
access practice self -censorship in order to protect their staff and their diplomatic posi- 
tion. With so few users of the Internet and the massive risks facing any advocates of 
freedom of speech, the government continues to hold the future of the Internet in 
Turkmenistan entirely In Its hands. 
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40. Reverse filtering occurs on die Web server hosting the content, as opposed to at a point along 
the way of the traffic flow, and is based on restricting requests based on geographies] location of 
the originating Internet Protocol address. Copyright holders wiio want to restrict access to tlieir 
content in certain markets often use reverse filtering. Examples indude hulu.com, BBC.com, and 
other sites tliat syndicate cornmerdal video and audio content that is subject to licensing. Tlse 
ONI lias detected that many UJS. military sites are inaccessible outside the United States. We 
strongly suspect tliat this may be as a result of reverse filtering. 
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Access lo Internet content In Ukraine 
remains largely unfettered. In part as 
a consequence of the 2005 Orange 
Revolution In which communication 
technologies played a significant role. 
Ukraine possesses relatively liberal 
legislation governing the Internet and 
access to Information. A number of 



state Initiatives aimed at controlling 
electronic media have emerged. In- 
cluding regulations to exercise surveillance over Internet content In order to 
"protect national security" and limit other forms of "undesirable" content. These 
regulations embody the potential for expanded formal and Informal controls, al- 


though they are unlikely to be enacted In the near future. 


Background 

Among the countries of the CIS, Ukraine Is second only to Russia In the size and 
strength of Its IT establishment. Ukraine was the birthplace of Soviet computing and 
Kyiv remains a major center for rr development- Ukraine Is an early adopter of policies 
aimed at supporting 1CT, considered by the government to be a main pillar of national 
development. The state has demonstrated the political will to undertake vital reforms 
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1 KEY INDICATORS [ 

GDP per capita. PPP (constant 2005 international dollars) 

6,529 

Life expectancy at birth (years) 

68 

Literacy rate (percent of people age 15+) 

100 

Human development index (out c4 1 79) 

82 

Rule cA law (out of 21 1) 

152 

Voice and accountability (out of 209) 

114 

Democracy index (out of 167) 

53 (Rawed democracy) 

Digital opportunity index (out of 1 81 ) 

90 

Internet users (percent of population) 

14.6 


Source by Irxfcdtor World Bank 2009a, World Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economist InteBgence Unit 2006, ITU 2007, MMwatb Marketing 
Croup 2009. 


In the telecommunications sector, although much remains to be done to promote a 
favorable environment for developing the Internet, fostering e-commerce, and intro- 
ducing e-governance. In 2008-2009, Ukraine moved up In the global ranking of the 
Networked Readiness Index to 62nd from 75th place — a notable improvement. 1 

In early 2000, the government Invested In developing the country’s 1CT infrastruc- 
ture extensively, but more recently the government has deprlorltlzed ICT develop- 
ment. TTils policy change explains the low position of Ukraine In two separate 
rankings, both carried out by the World Economic Forum In 2009: "Government Pri- 
oritization of ICT' (ranked 110th out of 134 countries) and "Importance of ICT to 
Government Vision of the Future" (ranked 1 14th). 2 

The January 2005 Orange Revolution — when opposition groups successfully chal- 
lenged the outcome of the November 2004 presidential elections that were allegedly 
unfair — highlighted the latent political power resulting from the "convergence" of 
Information Infrastructures (cell phones. Internet, and Independent media) and politi- 
cal mobilization. The opposition made full use of these technologies to mobilize and 
direct supporters In acts of civil disobedience, sit-ins, and general strikes. Although 
the Internet did not play a determining role In the success of the Orange Revolution, 
Its use by the opposition helped to foster the perception that these technologies served 
an important strategic role In organizing political opposition (which observers have 
termed "hyper-democracy”). * This perception. In turn, prompted neighboring author- 
itarian governments such as Belarus to crack down on Internet openness. 

Following the Orange Revolution, Ukrainian society has become more aware of Its 
power to bring about political changes. Political parties and the government have 
started using the Internet as an effective tool of political competition while employing 
techniques such as online political games, unofficial voting, e-meetlngs, and blogs. 
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Internet In Ukraine 

The partly liberalized Ukrainian telecommunications market is not fully developed. 
Fixed-line penetration remains low (27.8 percent), 4 and the telephone system requires 
modernization. The demand for mobile services has expanded rapidly, to reach a pen- 
etration of nearly SO percent. The largest telecom and top-tier ISP, Ukrteleeom, has 
92.86 percent state ownership. President Viktor Yushchenko has announced the forth- 
coming privatization of the state-owned telecom operator Ukrteleeom. The sate of the 
operator, however, has been delayed a number of times. The government envisages 
that SO percent of the shares will be sold for USD 3 billion, though analysts predict a 
much lower figure. The outdated equipment of Ukrteleeom makes the company less at- 
tractive to investors. 4 The state monopolies Ukrteleeom and Utel, the latter controlled 
by Ukrteleeom, together own 9S percent of the long-distance and International call 
market. 6 

State-owned Ukrteleeom is the largest ISP in the country, but It does not decisively 
control the other ma(or ISPs. Ukrteleeom dominates the fixed-line sector 7 and pos- 
sesses Ukraine's primary network, trunk, and zone telecom lines. Alternative telecom- 
munications providers are dependent on leased lines, because Ukrteleeom owns the 
ma)onty of the Infrastructure and many alternative providers do not have sufficient 
resources to build their own networks and consequently have to rely on Ukrtelecom’s 
infrastructure. Prices for long-distance and International calls of local operators made 
over Ukrteleeom lines were regulated by the Order of the Ministry of Communications 
of November 21, 1996, No. 234, on the basis of revenue sharing (which depends on 
the number of lines, equipment used, and administrative costs). New interconnection 
rules "ere Introduced In January 2007, under which Interconnection fees are calcu- 
lated on the basis of traffic volume. 

Although ISPs have considerably reduced their access costs (by, for example, teasing 
outdated or redundant Infrastructure from Ukrteleeom) and a few providers oiler free 
access during the night, most Ukrainians cannot afford to use the Internet. Internet 
penetration Increased to 14.6 percent in 2008." With regard to frequency of connect- 
ing to the Internet, local sources’ estimated that in March 2009 almost 8 million Ukrai- 
nian users accessed the Internet on at least one occasion over the course of the 
previous month. 10 There is a significant urban-rural digital divide: As of December 
2008, 41 percent of Internet users lived in settlements with more than S0,000 inhabi- 
tants. The share of Internet users in rural areas is very low." The majority' of users are 
concentrated in large cities, with Kyiv accounting for nearly 60 percent of Internet 
users, and the next seven largest cities a further 30 percent of all users. 12 Obstacles 
impeding expansion include high access costs, poor Infrastructure in the regions, high 
call rates, and low levels of PC ownership. 



252 


Ukraine 


Men are moie frequent users than women (59.3 percent), and most users access the 
Internet at the office, Internet cafes, or home. Various efforts have been made to boost 
Internet access at public Internet access places (I'lAPs). 15 Pilot projects have also been 
launched In an effort to Improve universal service provision In remote areas. There are 
more than 3,000 Internet cafes In Ukraine (or one for every 16,000 people In the coun- 
try). 14 In 2007, 70 percent of all Internet cafes accessed the Internet through a dial-up 
connection, 20 percent through dedicated lines, and 10 percent through cable TV net- 
works and others. 14 

There are about 400 ISPs in Ukraine according to the State Committee on Communi- 
cation and Informatization. '* As of March 2009, there were around 90 ISPs connected 
to the two Internet traffic exchange points. Ukrtelecom has recently taken steps to en- 
courage massive use of broadband services, and the number of ISPs offering broadband 
access services has rapidly Increased.'* In March 2005, there were only 10,000 DSL 
lines In Ukraine.'* At that time, DSLAMs were Installed In 4S0 cities in Ukraine, and 
work was under way with Cisco to permit a 1,000 percent increase In DSL subscribers 
by the second half of 2006. In Ukraine. DSL Is used by ISPs as high-speed leased lines. 
The most widespread technology used for this purpose Is HDSL, reaching 2 Mbps data- 
exchange speeds In both directions."' By the end of 2008, there were approximately 
1.5 million broadband subscribers (of whom about 500,000 were Ukrtelecom sub- 
scnbers). Penetration of broadband access in the country exceeded 8 percent. 20 

The government, recognizing the need for attracting foreign Investment and stimu- 
lating a favorable Internet environment, has also announced plans to provide low-cost 
access to the Internet In the ma|or cities using WlMAX technology. 21 Indeed, the wire- 
less broadband sector has experienced an Increased level of activity as the number of 
Wl-Fl ISPs has been augmented. 

Mobile operators plan to launch fixed-broadband services using frequencies previ- 
ously used by analog mobile services. Although cable operators have a significant pres- 
ence throughout the country, the lack of Investment has prevented them from offenng 
broadband and digital cable services in most places in Ukraine. A new DTH platform 
has been launched, and the Ukrainian broadcasting council has allocated Digital Ter- 
restrial TV licenses, opening the way for new services. 

There are a number of companies providing Internet access using satellite tech- 
nologies In Ukraine (these Include Ukrsat, Infocom-SK, Spacegate. Adamant. LuckyNet, 
Ukmet, and Itelsat). With the exception of Infocom-SK. all these companies are private 
operators. Ukrchastotnagllad, the Ukrainian frequencies supervisory center, reports 
that 86 operators have licenses to provide satellite communications services In 
Ukraine. Despite the large number of operators on the market, however, satellite tele- 
communications Is limited because of its high cost compared to the low average 
Income In the country. Hie government Is nevertheless deploying a digital satellite 
television and radio broadcasting system, which will also be used for Internet via satel- 
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llle. In 2007, there were five types of licenses for the provision of direct satellite com- 
munications services. 

There are currently two industry associations In the Internet sector, the Internet 
Association of Ukraine, 22 which owns the Ukrainian Internet Exchange (UIE), 21 and 
the Ukrainian Wireless Association. 24 The Internet Association of Ukraine alms to safe- 
guard the Interests of all participants In the Internet market and has successfully 
ensured a reduction In the price of internal traffic In Ukraine. 25 

Since 2001, the Ukrainian national country code top-level domain (".ua") has been 
administered by LLC "Hostmaster" founded by representatives of the Ukrainian Inter- 
net community .** The number of domain names registered under ".ua" Is steadily 
Increasing. For example, under ".com.ua," the total number of domain names 
increased from 31,153 In 2004 to 145,114 In April 2009. The overall number of 
domain names under ".ua” had Increased from 133,907 to 390,197 as of |anuary 1, 
2009." 

Blogging has also been on the rise. Ukrainian Internet users have opened more 
than 80.000 blogs on popular portals such as live) ournal.com (35,000). llvelnternet.ru 
(27,500), dnevnlk.blgmlr.net (11.000). drevo.uaportal.com (4.000). dlary.ru (2.S00), 
Jeans.com.ua/bIogs.php (2,300), and Dnevmk.org.ua (1,200). 28 

The most popular search engines In Ukraine are Ukrainian-based BlgNUr.net and 
ukr.net. Russian-based Yandex and Rambler, and Google. The majority (60.3 percent) 
of online searches In Ukraine are performed through Google, followed by Russian and 
Ukrainian search engines Yandex (18.3 percent), ukr.net (2.64 percent). Rambler (2.16 
percent), and Meta.ua (2.11 percent). 29 

Ukraine’s mobile sector Is very dynamic. There are six mobile providers In the coun- 
try: UMS 30 (GSM-900/1800 and NMT-4501), Kyivstar 31 GSM (GSM-900/ 1800). Astellt 32 
(GSM-1800). Ukralnskle Radlosystemy (GSM-1800), 33 and Utel (UMTS/WCDMA). 34 

Legal and Regulatory Frameworks 

The Ministry of Transport and Communications (through the State Administration for 
Communications) Is the policymaker In the electronic communications sector. The 
Law on Communications (2003) established the sector regulator— the National Com- 
munication Regulation Commission (NCRC), which was set up two years later. The 
law of 2003 does not guarantee the Independence of the NCRC. Instead, a number of 
Inconsistencies between sector laws have Increased the uncertainty about who has the 
power to appoint the commissioners. The NCRC Is responsible for licensing operators, 
monitoring the market, price regulation, frequency assignment, numbering, ensuring 
compliance with the legal framework, imposing sanctions, and resolving disputes when 
Interconnection agreements are not reached between operators. Hie NCRC’s work has 
often been obstructed by claims of unlawful appointments and operation. 34 
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Under the Law on Communications, operators are required to have a license before 
starting activity. 3 ® license fees vary from around EUR 1.5 million for fixed interna- 
tional telephony down to less than EUR 1,500 for network capacity and 10,000 tele- 
phone numbers. A 15-year national license for VoIP costs EUR 1S0.000. 37 The law 
specifies that local, Intercity, and international telecommunications services, as well 
as mobile telephone communications and television and radio broadcasting, must be 
licensed. The term of the license (except for IP-telephony) Is determined by the NCRC 
and cannot be less than five years. 3 * With the present government, Internet activity Is 
not subject to licensing or other forms of regulation. Liberalization of the market has 
also led to a rapid increase in the number of ISPs. 

The Law on Communications offers the NCRC a variety of tools to ensure competi- 
tive neutrality with regard to building communications Infrastructure. According to 
the current legislation, all telecommunications operators have the right to build tele- 
communications networks In accordance with a plan that has been approved by the 
Ministry of Transport and Communications (MTC). Companies must submit their 
plans to Ukrtelecom or the local government to receive permission to develop telecom 
networks. 

Monopolization by Ukrtelecom, lack of strategy for International telecommunica- 
tions services market development, and the absence of long-distance and International 
traffic control mechanisms are ma|or problems for the long-distance and International 
communications market. Interconnection Is governed by Chapter IX of the 2003 Law 
on Communications and the subsequent NCRC Order on Interconnection and Calcu- 
lation among Operators. Interconnection is very heavily regulated: the cost of calls 
from fixed phones to mobile phones Is determined by a government decree, and the 
redlstnbutlon of Incomes from such calls Is based on agreements between Ukrtelecom 
and the mobile operators. This rate Is currently UAH 0.6 per minute. These agreements 
between Ukrtelecom and mobile operators are signed on a yearly basis. At present, 
It Is difficult to obtain data on Interconnection between telephony operators be- 
cause all parties have an Interest In concealing actual conditions of their agreements. 3 ' 1 
There Is also no public Information available regarding the existence of complaints 
against Interconnection regulation. For fixed-to-moblle Interconnection, the termina- 
tion fee is UAH 0.25 per minute. The price of call termination In the moblle-to- fixed 
market Is decided by commercial agreement between the parties, but the tariff cannot 
be more than UAH 0.25. Moblle-to-moblle Interconnection Is negotiated between the 
parties. 

The Law on Communications classifies market players In the telecom sectors as 
either "operators" or "providers." Under Article 1 of the law. "providers" do not have 
the right to maintain or operate networks, or to provide channels. Operators are div- 
ided Into mobile operators, landline operators, and landllne wireless operators. Mobile 
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operators need to obtain a license for provision of phone services and for the frequen- 
cies they use. Fixed operators are required to have a license for local, national, and in- 
ternational services, while fixed wireless providers need a license for fixed operators as 
well as for the frequency they operate. 

The legal status of VoIP providers has yet to be defined. Within the context of the 
current definitions, VoIP providers could be considered "operators” and therefore be 
required to undertake the same licensing procedures as the other categories of opera- 
tors. Obviously there Is a degree of uncertainty In the market. Tire losses from the 
Illegal termination of voice calls In Ukraine have been calculated. Ukrtelecom offers a 
termination rate for IP calls of USD 0.75-0.77. It Is not known how many (If any) IP 
telephony companies take advantage of this offer. 

The country -code top-level domain (CC TLD) ".ua" Is administered by the indepen- 
dent company Hostmaster. In 2008, there were two separate legislative initiatives pro- 
posing to establish governmental control over the administrative body. Oleg Shevchuk 
(Prime Minister of Ukraine, Bloc of Yulia Tymoshenko) suggested that the administra- 
tion of the CC TLD be performed by a nonprofit NGO representing the IT sector. How- 
ever, any final appointment decision would be enacted only after approval by a 
supervisory board. Including representatives of the National Communication Regula- 
tion Commission (NCRQ, the Anti-Monopoly Committee, and other central executive 
bodies.* 0 Another draft law envisioned stricter measures* 1 According to the draft law, 
the administrator — a noncommercial organization — should be founded by associa- 
tions of communication providers as well as authorized governmental bodies. The 
administrator would be approved by the Cabinet of Ministries following a proposal by 
the State Informatization Committee and the NCRC. Furthermore, the administrator's 
activity would be organized by a coordination council composed of executive bodies 
and self-regulated organizations. However, these two proposals were not successful. 

At present, there are no controls on Internet access or content. However, this situa- 
tion may be changing as government figures have made public calls for stricter re- 
gulation of the Internet, citing national security concerns.** Suggested measures 
Include licensing ISPs, registering Internet resources, and monitoring content related 
to obscene or harmful material. The threat of Internet censorship was raised in 200S 
when the Ministry of Transport and Telecommunications introduced, and subse- 
quently withdrew, a decree regulating registration of Web sites hosted in Ukraine for 
the purposes of national security.** In 2009, the Ukrainian Security Service was 
Instructed to prepare draft legislation that would obligate news Web sites to register as 
media.** 

The Law on Protection of Public Morals of November 20, 2003, enacted during the 
term of the previous government. Is still effective. It prohibits the production and cir- 
culation of pornography; dissemination of products that propagandize war or spread 
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national and religious Intolerance; humiliation or Insult to an Individual or nation on 
the grounds of nationality, religion, or Ignorance; and the propagation of "drug addi- 
tion. toxicology, alcoholism, smoking and other had habits." (Article 161 of the Crim- 
inal Code provides for punishment for Incitement of national, racial, and religious 
Intolerance, and demeaning of national honor and religious beliefs.) 

The National Expert Commission for the Protection of Public Morals (NECPPM) has 
the authority to monitor and evaluate media materials (including the Internet), Issue 
conclusions on their compliance with the Law on Protection of Public Morals, and pro- 
pose revocation of operators’ licenses In case of violation. 4S The commissioners of the 
NECPPM are approved by the Cabinet of Ministries. Since 2008, the NECPPM has 
made several decisions about TV broadcasts, movies, and books that provoked signi- 
ficant controversy In the electronic media community. For example. In November 
2008 the commission decided that the Russian-based social network "V kontakte" 
(vkontakte.ru) contained pornographic materials and Instructed the Ministry of For- 
eign Affairs to address the embassy of the Russian Federation to Ukraine on this issue, 
In order to prevent further dissemination of such materials by the social network.* 6 

Subsequently, on March 20. 2009, the Internet Association of Ukraine and the com- 
mission signed the Memorandum on Cooperation about Security Issues in the ".ua" 
Domain. 47 The association and Its members took on the responsibility’ for monitoring 
the Ukrainian domain and preventing dissemination of materials violating the Law on 
Protection of Public Morals. 

In September 2005, the Cybercrime Convention of the Council of Europe was rati- 
fied by President Yushchenko, with reservations regarding the possession of child por- 
nography and misuse of devices. Ukraine has also signed and ratified the Optional 
Protocol to the Convention on the Rights of the Child on the Sale of Children. Child 
Prostitution, and Child Pornography. Prohibition of the importation, production, 
sale, and distribution of child pornography In Ukraine Is detailed In Artlde SOI of the 
Ukrainian criminal code. However, there Is no prohibition of the possession of such 
material. 

In December 2008, the Ministry of Internal Affairs searched the premises of one of 
the most popular Ukrainian file-exchange networks (lnfostore.org) and confiscated 
servers and other equipment under the pretext that the network was hosting porno- 
graphic materials. The owners Insisted they provided the required Information before- 
hand and protested against the actions of the law enforcement authorities. Since this 
Incident, lnfostore.org has been unavailable. 48 The ministry's actions were under- 
pinned by a decision of the National Expert Commission for the Protection of Public 
Morals. 

In October 2008, MP Pavio Ungur|an (Bloc of Yulia Tymoshenko) submitted a draft 
law on combating child pornography. 4 " He suggested Imposing obligations on ISPs to 
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Hack URLs visited by subscribers and to Inform law enforcement about users who 
attempt to open Web sites containing child pornography. The draft recommends 
blocking child pornography sites, and envisions cnmlnal liability for ISPs that host 
such Web sites. The draft law has been widely criticized, but the author has not with- 
drawn It. 40 

The Supreme Economic Court accepted the 2004 Resolution on Certain Issues Con- 
cerning the Resolution of Disputes Related to Copyright and Intellectual Property 
Rights Protection, which provides procedures for the protection of Intellectual property 
rights — In particular, sales of various computer software programs. Ukrainian legisla- 
tion has been enhanced and brought into line with the TRIPS requirements by several 
laws amending Ukrainian Intellectual Property Laws. 41 However, most of the focus in 
Ukraine In relation to music and software piracy has been on offline Infringements, 
because of the existence of large pirate CD plants In the country. New legislation 
adopted in May 2005 was Intended to resolve legal loopholes with regard to piracy. In 
subsequent years, further legislation In this field was passed providing legal protection 
for computer programs, broadcasting and cable retransmission, databases, and resale 
rights, as well as adequate enforcement measures. According to the Ukrainian Ministry 
of Justke, around 80-90 percent of legislation In almost all key intellectual-property- 
rights fields conesponds to the EU uo/wis cammunautalre .** 

In February 2007, the Verkhovna Rada adopted amendments to the Criminal Code. 
Now individuals charged with piracy can face three to six year imprisonment (up from 
the previous two-year sentence) or a fine that could reach a maximum of UAH 51,000 
(USD 10,000). S! Microsoft Ukraine stated that 80 percent of software used In Ukraine 
was unlicensed. 

In 2004, the Regulation on the Fundamentals of Revealing General Crimes was 
adopted by Authorities of the Ministry of Internal Aflalrs. This regulation authorizes 
the use of the police database for crime-fighting purposes. The police database includes 
data on the crimes, the persons involved, the Items Installed, and other relevant inves- 
tigative data. The regulation does not correspond to the personal data protection pro- 
visions of the Council of Europe Data Protection Convention of 1981. There are no 
national laws on data retention. 

Surveillance 

The Council of National Security and Defense Is the main governmental body respon- 
sible for national security and defense. The Council monitors Information security and 
coordinates the work of the other executive bodies In the field. The Security Service of 
Ukraine Is empowered to Initiate criminal Investigations and use wiretapping devices 
on communications. Existing legislation has specified neither the circumstances that 
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(ustlfy Interception of Information from communication channels nor the time limits 
of any such Interception. The recently established State Service for Special Communi- 
cations and Information Protection Implements governmental policy on protecting 
state Information and confidential communication, and exercises control over crypto- 
graphic and technical Information security. 54 

On June 17, 2002, the State Committee on Communications Issued Order No. 122, 
which introduced mechanisms for Internet monitoring. The order required ISPs to 
Install black-box monitoring systems In order to provide access for state organiza- 
tions. The purpose of this monitoring was to control unsanctioned transmission of 
data containing state secrets. However, "state secret" Is not dearly defined In current 
regulations, allowing authorities broad discretion In Interpretation. The difficulties In 
separating state from nonstate users also expose the latter to monitoring. By 2006, a 
significant number of large ISPs Installed black boxes, and the Security Service of 
Ukraine sent out letters to governmental authorities Insisting they use their access 
services. 

Under the pressure of public protests and complaints raised by the Internet Associa- 
tion of Ukraine and the Ukrainian Helsinki Human Rights Union, the Ministry of 
Justice abolished this order In August 2006. Some human rights groups claim the Secu- 
rity Service of Ukraine Is keeping Intercepted messages and carrying out Internet sur- 
veillance on a large scale. 54 Since the revocation of Order No. 122, the service has 
acted within the limits prescribed by the Law on Operative Investigative Activity. 
According to estimates from the Internet Association of Ukraine, the service may have 
the technological capability to do so In 50-60 percent of the cases. 5 ® The level of sur- 
veillance may rise up to 90 percent In regions where It Is harder for access providers to 
oppose the Security Service and other law enforcement bodies. 

To compensate for the lack of comprehensive legislative regulation of communica- 
tion Interception and surveillance, the Cabinet of Ministers adopted Order No. 1 169 
In September 2007. This order decrees that permission must be obtained from a judge 
or head of the respective Court of Appeals to carry out surveillance. Human rights 
groups, such as the Internet Association of Ukraine and the Ukrainian Human Rights 
Ombudswoman, protested against the order, claiming It legalized unlawful Infringe- 
ment upon the right to privacy. Notwithstanding the attacks against It, Order 
No. 1169 remains active. s ' Statistics also reveal the growing use of Interception and 
surveillance by law enforcement agencies In Ukraine. According to the Supreme Court 
of Ukraine, the number of applications authorizing the use of monitoring and surveil- 
lance tools to the Ukrainian Courts of Appeals Initiated by law enforcement bodies 
grew from 15,000 In 2005 to 19,989 In 2007 and reached 25,086 In 2008. In 2008, 
the Ministry of Internal Affairs made 14,815 submissions; the Security Service of 
Ukraine, 8,323; and the tax police, 1,655. It Is not known how many submissions 
were granted, nor Is It dear how many were directly related to electronic surveillance. 5 * 
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ONI Testing Results 

In 2007 and 2008, the OpenNet Initiative conducted tests In Ukraine from different 
access points on six main ISPs: Alkar, Intertelecom. Vlstl Net, Volz, Volla, and UkrTele- 
com. The ONI concluded that there Is no filtering on the backbone In Ukraine. How- 
ever, the ONI found that a number of U.S. military* Web sites as well as one gambling 
site were subject to reverse blocking and hence Inaccessible in Ukraine. 59 

Conclusion 

The citizens of Ukraine en|oy unfettered access to the Internet. The country's Internet 
infrastructure Is rapidly* developing, and ICTs are beginning to have a more notable 
Influence over the political process. The country possesses an Internet Infrastructure 
that Is more oriented toward European ISPs, and this orientation diminishes the influ- 
ence of any filtering behavior on the part of Russian ISPs. The government has built up 
an Intricate system of bodies and content regulations that can be geared toward surveil- 
lance of Information canted on telecommunications networks, including the Internet. 
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Uzbekistan 


Uzbekistan’s tight control of the Inter- 
net has resulted In the most pervasive 
regime of filtering and censorship In 
the CIS. Filtering Is comprehensive 
and. until 2006 , largely undeclared, 
with the government denying the ex- 
istence of these practices. At present, 
the government employs sophisti- 
cated multilayered mechanisms to 
exercise control over the Internet. 

Including adopting restrictive policies, applying technological measures, and 
compelling self-censorship of the media. 



Background 


At present, and In spite of the formal separation of powers enshrined In the Constitu- 
tion of the Republic of Uzbekistan, virtually all power Is invested In President Islam 
Karimov. A former first secretary of the Uzbek Communist Party (UCP) during the 
Soviet period, Islam Karimov started his current term of office In January 2000. A refer- 
endum In January 2002 extended the presidential term of office from five to seven 
years. The president has almost complete control over the parliament, which supports 
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1 KEY INDICATORS [| 

GDP per capita. PPP (constant 2005 international dollars) 

2,290 

Life expectancy at birth (years) 

67 

Literacy rate (percent of people age 15+) 

97 

Human development index (out erf 1 79) 

119 

Rule erf law (out of 211) 

182 

Voice and accountability (out erf 209) 

202 

Democracy index (out of 167) 

164 (Authoritarian regime) 

Digital opportunity index (out of 181) 

123 

Internet users (percent of population) 

8.8 


Source by irxfcator World Bank 2009a, Work) Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economist InteSgence Unit 2006, ITU 2007, Miniwatb Marketing 
Croup 2009. 


him overwhelmingly. On a lew occasions, the government has resorted to the use of 
force In order to maintain Its control over the country. One such occasion were the 
events In Andl|an In 200S when hundreds of civilians were killed. 1 During the clamp- 
down that followed the public demonstrations, most of the foreign media were ex- 
pelled from the country. The majority of human rights organizations were ousted and 
their activities banned.' 

During his extended authoritarian rule. President Karimov has demonstrated an 
active commitment to controlling the Information environment in the country and 
constraining the expression of dissident viewpoints. The active opposition has been 
forced to leave Uzbekistan and has been banned. 3 The Internet often remains the 
only way for the opposition to communicate with Uzbek society. In 2004, Intemews 
International — a nonprofit organization that supports open media and Internet devel- 
opment worldwide — was banned from Uzbekistan.* 

In the beginning of October 2008, an unprecedented two-day media seminar In 
Tashkent focused on freedom of speech In the country. The government did not allow 
foreign media and independent Uzbek journalists to cover this seminar. The only 
media admitted were representatives of the state-controlled electronic and print media. 

The complex laws and regulations in Uzbekistan have resulted in self-censorship of 
online publishers, independent journalists, and bloggers. This self-censorship, coupled 
with a highly sophisticated Internet filtering regime, significantly stifles public dis- 
course on political and human-rights topics. 

State control of the Internet stands In start; contrast to the government's official 
enthusiasm for promoting ICTs. Until 2001, Uzbekistan was a regional leader In the 
adoption of the Internet and the prioritization of ICT as a mechanism for national 
development. Uzbekistan was among the first of the post-Soviet republics to establish 
a national agency responsible for ICT development (UzInfoCom), to contribute state 
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resources to building a sizable academic and research network (UzSClNET), and to 
launch an ambitious project to provide Internet to the main government institutions 
(Cabinet of Ministers and presidency). After 2001, Uzbekistan continued to receive 
sizable foreign support aimed at developing Its ICT infrastructure. Including a large 
network of Internet access points In the regions. Uzbek government officials at all 
levels were sent abroad to study e-government systems and ICT. Until 2001-2002, the 
Internet remained open and free from filtering, with the exception of some limited 
filters for pornography that were implemented on UzSClNET. 

The turning point in the state's relationship to Internet freedom began following 
a series of attacks In Tashkent in 2004 blamed on the Hlzb-ut-Tahrtr (Hit) and the 
Islamic Movement of Uzbekistan. These attacks have been generally associated with a 
deepening crackdown on Uzbek society that encompasses all forms and channels of 
dissent, including the Internet- 

Internet In Uzbekistan 

Uzbektelecom JSC has retained the status of a legal monopoly on services of access to 
International telecommunication networks. Including the use of VoIP technologies. 
According to the government resolution, monopoly status will be retained after priva- 
tization of Uzbektelecom JSC (at present the state owns 94 percent of Uzbektelecom). 
As a result, operators and providers are entitled to access international telecommuni- 
cation networks exclusively through the Infrastructure of Uzbektelecom JSC, which 
facilitates control over Internet content and hinders active competition on the 
communications market. Uzbektelecom dominates around 90 percent of the fixed mar- 
ket and owns 14 regional and five specialist subsidiaries, which Include the national 
Internet (UzPAK) and a mobile operator. 4 

The legal regime permits competition of the services providing Internet access. The 
number of ISPs In Uzbekistan has grown considerably: from 25 In 1999 to S39 In 2005. 
Because of Increased legal requirements for operation, the number of ISPs dropped 
to 430 in 2006 but subsequently Increased to 859 as of Aprtl 2009.' There are seven 
top-tier ISPs with connections to China, Russia. Italy. Germany, and the Netherlands. 
Uzbekistan's telecommunications Infrastructure supporting Internet access is quite 
robust compared to neighboring countries. The backbone Is connected to the Trans- 
Asia-Europe Fiber-Optic Communications Line (TAE FOCL), which links China and 
Europe and has several olf shoots. The country also has a network of microwave radio 
relay lines that provide high-speed data transmission/ The sole Internet exchange 
point, Tas-lX, used by 26 ISPs* Is located In Uzbek Central Telegraph's premises’ 

As of January 2007, the digital communication network In Uzbekistan covered 100 
percent of ddes, towns, and regional centers. 10 Telecommunication networks (Includ- 
ing 89 percent of digital ones) covered 93 percent of rural settlements." The number 
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of Internet users as of 2008 was 2.4 million — approximately 8.8 percent of the coun- 
try’s population. 12 According to local surveys, In contrast to neighboring countries, 
Uzbek women use the Internet at a rate almost equal to that of their male counterparts, 
with a difference of 3 percent. 12 About 41.3 percent of Internet users are In the 16 to 20 
age range. 1 * Uzbek users most commonly access the Internet from their home (42.73 
percent) and work (44.60 percent), and over 70 percent of Internet users are In the 
capital Tashkent. Approximately 30 percent of the Internet users visit Internet cafes. is 
According to official data as of April 2009, there were 873 Internet access centers In 
Uzbekistan. 16 

Residential Internet services are unaffordable for the majority of the population. The 
average cost of dial-up services Is USD 0.37 per hour, and unlimited access Is USD 67.14 
per month. The cost of ADSL access Is significantly lower, on average. It does not 
exceed USD IS per month and offers a speed of 128 Kbps. The quality of Internet ac- 
cess and communication services In Uzbekistan Is rapidly improving. The bandwidth 
capacity of the external channels of Internet access has shown steady growth. 17 As of 
2009, It totaled 82S Mbps, up from 44 Mbps In July 20O4. ls 

The domain registration of the national ".uz" zone has been decentralized since 
December 2005 when five operators (now seven) 19 were granted the status of registrars. 
Created with the support of foreign organizations, the Computerization and Informa- 
tion Technology Developing Center (UzInfoCom) Is a NGO that develops computer 
and Information technologies and administers the country-code top-level domain 
name ".uz." 20 According to UzInfoCom, as of April 2009 the number of domains regis- 
tered in the ".uz" zone was 8.298. 21 

The most popular language among Uzbek Internet users Is Russian (up to 70 per- 
cent), followed by Uzbek (2S percent), and English Oust about 1 percent). The most vis- 
ited Web sites in Uzbekistan are media sites and search engines located in the Russian 
Internet zone (".ru"). 

According to information published by the State Committee on Radio Frequencies of 
the Republic of Uzbekistan, the number of cellular phone customers in Uzbekistan has 
nearly doubled during the last year, and as of November 1, 2008, It had reached the 
level of 12.S million. 2 * There are five cellular operators currently active on the market 
of Uzbekistan: MTS- Uzbekistan (GSM), Unltel or Beeline (GSM), Coscom (GSM), Rubi- 
con Wireless Communlcatlon-Perfectum Mobile (CDMA), and Uzmoblle (CDMA). 

Legal and Regulatory Frameworks 

The Uzbekistan government has approved the Program for Development of Computer- 
ization and Information and Communication Technologies for 2002-2010. 23 This pro- 
gram envisions the establishment of a national segment of the Internet and alms to 
cover all cities and settlements In the country with ICT services by the end of 2010. 
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The Internet Is legally- considered mass media In Uzbekistan. Article 29 of the Uzbek 
Constitution guarantees freedom of expression, and Article 67 bans censorship. Free- 
dom of information, however, can be legally restricted to protect the moral values of 
society, national security, and Uzbekistan's spiritual, cultural, and scientific potential. 
The Central Inspection on Protecting State Secrets In the Press officially censored media 
until 2002. Since then, the government Increasingly Imposes self-censorship on online 
media publishers, bloggers, and opposition leaders. 24 A recent example is the Mass 
Media Law. 25 Discussions on texts of this law were closed to the public to minimize 
media criticism against restrictive provisions. The law holds media owners, editors, 
and staff members responsible for the objectivity of published materials. 20 Indepen- 
dent and foreign media. Including online publishers, need to register with the Cabinet 
of Ministers In Uzbekistan. In addition, the law forbids entitles with 10 percent or 
more foreign participation from establishing their own media outlets In the country. 
Online versions of newspapers are within the scope of the law and as such are subject 
to registration If their content dlflers from the printed publication. In order to gain 
more control over the Internet, the government has stated that subsequent regulations 
would specify the type of Web sites that would need to be registered 27 

Formal regulation of the Internet and electronic mass media commenced with the 
adoption of Regulation No. 52 by the Cabinet of Ministers of Uzbekistan. 24 In particu- 
lar, Regulation No. 52 established the National Network of Information Transmission 
(UzPAK) and ensured Its monopoly on international Internet connectivity for purposes 
of preserving national information security. The government forced ISPs to route their 
traffic through the state network to access International traffic. 29 Thus, Internet cafes 
and other clients were subjected to UzPAK's filtering system, and a number of Web 
sites were temporarily inaccessible. In July 2002, the Communications and Informa- 
tion Agency of Uzbekistan (UzCIA) suspended the work of EastUnk, care of the major 
Uzbekistan-based ISPs, because the ISP had connected to international networks 
circumventing the national data-transmlsslon network run by UzPAK. 30 Regulation 
No. 352 31 attempted to abolish UzPAK's monopoly on international connections and 
foster a decentralization process In the field of Internet providers. However, more than 
80 percent of the ISPs still run their connection through UzPAK despite the high tariffs. 
Only a few ISPs have their own International satellite connections that provide better 
service than UzPAK, for lower fees. 32 A growing trend among ISPs Is using UzPAK’s 
lines to send messages and satellite networks to view or download Information. This 
solution allows the providers to circumvent UzPAK's monltonng network and chan- 
nels’ low capacities. 

UzPAK was established within the UzCIA. 33 Under Resolution of the Cabinet of Min- 
isters No. 232 of 2002, UzCIA Is responsible for providing information security and reg- 
ulating providers' activities in the area of communications. Including the Internet. 34 
The director general of the agency Is also the deputy prime minister responsible for 
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telecommunications, and also acts as chairman of the board of Uzbektelecom and as 
chairman of the State Commission on Radio Frequencies. 35 Since most of the key reg- 
ulatory functions in the sector are concentrated in the hands of the deputy minister, 
regulator)' Independence Is practically nonexistent. All ISPs and operators must obtain 
a license from UzCIA. 36 The licenses are usually vet)’ specific, with a typical duration of 
ten years. Under Order No. 216, Internet providers and operators cannot disseminate 
Information that. Inter alia, calls for violent overthrow of the constitutional order of 
Uzbekistan, Instigates war and violence, contains pornography, or degrades and 
defames human dignity. 37 Uzbektelecom, the national telecommunication operator, 
has discretionary power to oversee the ISPs’ observance of this order. 38 In 200S, the 
ISPs In Uzbekistan faced another regulatory hindrance to their operation. The new Res- 
olution No. 155 of the Cabinet of Ministers stipulated that only legal entitles should be 
entitled to provide licensed telecommunication services. Individuals have to register as 
legal entitles and obtain new licenses before continuing to provide Internet services. 

In 2004, the Cabinet of Ministers adopted Regulation No. 555, establishing the Cen- 
ter for Mass Media Monitoring within UzCIA. The center's key ob|ectlves are to analyze 
the contents of Information disseminated online and ensure Its consistency with exist- 
ing laws and regulations. 3 ’ Another regulatory body, the Uzbek Agency for Press and 
Information (UzPlA), monitors the observance of media law and Issues registrations 
and licenses for media outlets. 40 This agency has the power to suspend media licenses 
for "systematic' 1 breaches of Uzbekistan's restrictive media and Information laws. 

The 2002 Law on Principles and Guarantees on Access to Information reserves the 
government’s right to restrict access to Information when necessary to protect the 
Individual "from negative Informational psychological influence." 41 The government 
further controls Information streams by authorizing the use of political, economic, or 
other measures when necessary to counteract "threats in the sphere of information 
security" or "Ideas of terrorism and religious extremism." 42 

Surveillance 

Internet filtering in Uzbekistan did not begin with the security forces, but rather with 
the academic and research network, which was funded with foreign development assis- 
tance. The first Uzbek ISP to Implement a filtering policy was UzSClNET. which used 
an open-source filtering product (SquldGuard) and a publicly available list of porno- 
graphic sites. The network justified Its position favoring the filtering of pornography 
on the basis that It was a provider to schools and universities, as well as the need to 
conserve bandwidth. However. UzSClNET lacked formal legal status In Uzbekistan 
and as a result was dependent on UzInfoCom for maintaining Its license as a service 
provider. The formal head of UzSClNET was also the director of UzInfoCom and a dep- 
uty director of UzCIA. Simultaneously, he was also acting as an adviser to the preslden- 
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tlal Security Council. As a result, pressure was exerted on UzSCINET to cooperate with 
authorities, and over time the network became a "testing ground" that security forces 
used to develop a system for selecting and blocking unwanted Web sites. As late as 
200S, the system was far from comprehensive, with previous ONI research showing a 
great deal of divergence among the various ISPs — some comprehensively blocked con- 
tent, while others allowed unfettered access. The suspicion Is that some commercial 
ISPs had close connections with President Karimov's Inner circle and hence were able 
to withstand pressure to implement filtering, which gave them a commercial advan- 
tage (as users who wished to access such content would pay to access the Internet 
through these ISPs). 

Uzbekistan’s prtnclpal Intelligence agency, the National Security Service (SNB), mon- 
itors the Uzbek sector of the Internet and "stimulates" ISPs and Internet cafes to prac- 
tice self-censorship. Soviet-style censorship structures were replaced by "monitoring 
sections" that work under SNB's guidance. There Is no mandatory government prepub- 
llcatlon review, but ISPs risk having their licenses revoked If they post "Inappropriate" 
Information. Occasionally, the SNB orders ISPs to block access to opposition or reli- 
gious Web sites.* 1 A survey of Internet filtering practices among Uzbek ISPs was con- 
ducted by ONI in January 2007. Respondents confirmed that they use filtering 
applications including SquldGuard and FortlGuard. The SNB's censorship is selective 
and often targets articles on government corruption, violations of human rights, and 
organized crime. Usually, It affects URL-speclfic pages instead of top-level domain 
names. Uzbek ISPs block entire Web sites or Individual pages upon SNB's unofficial 
requests. Accessing a blocked page redirects the user to a search engine or to an error 
message such as "You are not authorized to view this page." The retransmission of 
blocked channels Is also prohibited. 

The SNB regularly exchanges data with Russian Intelligence sources and allegedly 
collaborates with the Russian Foreign Intelligence Academy. The SNB also utilizes a 
blacklist and keyword approach. The SNB practice of active surveillance contributes to 
self-censorship among Internet operators and the Internet community as a whole. 
Most users will not engage In topics that touch on unpopular government policies 
relating to human rights in the country out of fear of arbitrary prosecution by the 
authorities. 

ONI Testing Results 

In 2007 and 2008, the OpenNet Initiative conducted testing on five main ISPs In the 
country: Arslnform, Buzton, Sharq Telecom. Sarkor Telecom, and Uzbektelecom. The 
test results show pervasive blocking of different categories of Internet content, Includ- 
ing local and International human rights sites (Inter alia, content promoting the rights 
of (oumallsts working in repressive regimes), local and regional media sites, opposition 
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sites (Inter alla f content criticizing the president), local NGOs, sites of religious organi- 
zations, and terrorist groups. Interestingly, a large number of sites (Including forum 
sites, media sites, and others) remain inaccessible for the user even though they’ are 
not blocked outright. 

Conclusion 

Through Investment and legal mechanisms, the government has demonstrated its 
willingness to promote ICT in Uzbekistan. At the same time, Uzbekistan maintains 
the most extensive and pervasive filtering system among the CIS countries. Although 
expressly banned in Uzbek law, filtering is widespread and apparently growing. A large 
number of sites with political and human rights content sensitive to the government 
remain inaccessible to Internet users. The security forces in Uzbekistan manually check 
Internet access at '"edge locations" (such as Internet cates) and monitor users' activities. 
The regulatory’ framework is so Intricately woven that in most cases ISPs and Internet 
publishers are unaware of the governing law. To avoid sanctions from the authorities, 
Internet users frequently commit themselves to self-censorship. 
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Europe Overview 



The Internet In Europe Is controlled predominantly through a combination ol govern- 
ments and Information and communication technology (1CI) companies. Countries, 
whether members of the 27 member European Union (EU) or otherwise, have all regu- 
lated the Internet In some way. with a number of them censoring defamatory speech 
or monitoring copyright Infringement. Meanwhile, 1CT firms have taken It upon 
themselves to censor child pornography and hate speech. 

Unlike In other parts of the world, however, the Internet in Europe Is regulated to a 
large degree through the coordinated action of states, usually through the processes of 
the EU. As European governments look to harmonize their cyber-law policies over the 
coming years, they will increasingly turn to the EU to decide what to regulate and how 
to regulate the Internet. 

Regional Regulation 

There Is no explicit obligation at the EU level mandating either governments or 1CT 
firms to filter or remove online content, though this position may soon change. In 
December 2008, the EU approved the next phase of studies of new filtering technolo- 
gies to fight Illegal content The Safer Internet Program adopted by the EU Council of 
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Ministers Intends to protect minors from Illegal and harmful content online. In partic- 
ular, "child sexual abuse material, grooming and cyber bullying." This program will 
operate from 2009 to 2013 and cost EUR SS million.' Part of the program involves the 
development of tracking technologies that will monitor child pornography and help 
build a Europol database of Illegal online behavior. 2 

This program Is the latest in a series of related initiatives Introduced by the EU. The 
first EU attempt, "Action Plan for a Safer Internet." aimed at regulating content 
deemed Illegal or harmful by Individual states, was passed in 1999 and has been In 
force since 2002. 1 Illegal content varies between countries; Nazi propaganda, for exam- 
ple, Is Illegal In France and Germany but not In the United Kingdom. Harmful content 
Is defined more broadly and can Include anything that would offend the values and 
sentiments of races, religious groups, or other minorities. The action plan emphasized 
the need to take steps In five broad areas In order to curb Illegal and harmful content 
on the Internet: 

1. Promoting voluntary Industry self-regulation and content monitoring schemes, 
Including the use of hotlines for the public to report Illegal or harmful content; 

2. Encouraging Internet service providers) to provide filtering tools and rating systems 
that enable parents or teachers to regulate the access of Internet content by children In 
their care, while allowing adults access to legal content; 

3. Raising awareness about services offered by 1CT firms to allow users to control access 
to content; 

4. Exploring the legal Implications of promoting the safer use of the Internet; and 

5. Encouraging International cooperation In the area of regulation. 

For the most part, the 2002 action plan left It to Individual states to take these steps. 
The Safer Internet Program, passed In 200S, alms to give the EU broader powers and 
new took to achieve these goals Itself. Among other things, the 2005 program funded 
hotlines for dozens to report offending content, sponsored education efforts on con- 
sumer and data protection, and authorized new studies Into filtering technology for 
Illegal content.* 

Two European directives may form the basis of expansive legislation regulaUng the 
Internet in the coming years. The Electronic Commerce Directive Limits the liability of 
online providers for transferring, caching, and hosting Illegal content. 5 The Audio- 
visual Media Services Directive (AVMSD). meanwhile, alms to extend current EU regu- 
lation for broadcast television content to the Internet. 6 The regulations include, among 
other things, the right of member states to sue content providers living outside their 
Jurisdictions and the responsibility to make harmful content Inaccessible to minors. 
Because the AVMSD was passed only In 2008, It remains undear whether or not the 
directive applies to all Internet video content, or |ust on-demand programming sent 
over TCP/IP. 
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Most existing EU regulation regarding filtering overlaps with or supplements the 
existing policies of Individual states. On Issues of child pornography, human traffick- 
ing terrorist propaganda, and fraud, there exists a broad consensus to monitor and 
block offending material. Surpdslngly. no such consensus exists on who or what 
should be held responsible for such material. Most countries have agreed to treat ISPs 
as mere conduits of Information. However, some countries have held these entitles 
responsible for offending material. 

The EU maintains a liberal regional policy toward ISPs, limiting their liability under 
the Electronic Commerce Directive, 7 however, member states have been Inconsistent 
In applying the directive. In July 2007, a Belgian court required an ISP to implement 
technical measures in order to stop copyright infringements committed by Its sub- 
scribers through P2P networks.® In 2008, the Bddsh government warned that, absent 
ISPs' "voluntary self-regulation," It would hold service providers legally responsible for 
allowing unlawful file shartng.' British ISPs have, by all appearances, already chosen to 
self-regulate. 10 

Despite the lack of strong EU -level regulation, many member states have taken 
It upon themselves to filter unwanted content. Many countries, such as the United 
Kingdom," Sweden, 12 Finland, 11 Denmark, 14 Germany," and Italy, 16 filter child por- 
nography, and some governments (e.g.. United Kingdom, France) have pressured ISPs 
to prevent copyright Infringements by filtering." Quite recently, It was reported that a 
number of Web sites In Belgium were blocked. In contrast to other countries, the Web 
sites were filtered not because of displaying pornographic content but in order to guar- 
antee the privacy rights of suspects or cnmlnals who committed sexual offenses against 
children and whose Identity was accordingly revealed In the targeted Web sites. 18 

In addition to filtering directed by governments, ISPs and search engines within 
countries have often taken It upon themselves to monitor and filter controversial con- 
tent. Often, these companies have decided to self-regulate In order to preempt govern- 
ment regulation. 

Copyright 

Film studios, record labels, and their associations have all strongly lobbied the EU to 
require ISPs to block potential copyright Infringements and terminate the contracts of 
subscribers who visit particular Web sites. Yet the EU has been slow to act, authorizing 
studies but rarely taking action. Generally, however, where the EU has failed to assist 
the content Industries, Individual states have been quick to act, enthusiastically prose- 
cuting companies and Individuals who violate copyright law, both within and outside 
their borders. 

The EU's policy- on Intellectual property and Illegal file sharing Is laid out in 
three directives. The Electronic Commerce Directive standardizes information and 
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transparency requirements for ISPs, commercial communications, and electronic con- 
tracts. 19 The 2001 Directive on Copyright and Related Rights gives authors, performers, 
and film producers the sole right to reproduce and distribute their respective writings, 
performances, sound recordings, and films. 20 And the 2004 Directive on the Enforce- 
ment of Intellectual Property Rights alms to harmonize intellectual property protection 
regimes across the El) and allows member states' fudges to Issue Injunctions against 
ongoing or impending Intellectual property violations. 21 None of these directives 
have mandated the use of filtering technologies to protect intellectual property 
regimes. However, where the EU has been slow to respond to the demands of the film 
and music Industry, Individual countries have been more proactive. In 2007, a Danish 
court ordered the country's largest ISP to block AUofmpi.com, a Web site offering 
Illegal music downloads. 2 * In March 2007, Bulgarian police arrested the owner of 
Arenabg.com, one of Bulgaria’s largest BitTorrent trackers, and blocked the Web site 
for four days. 2 * Most seriously, in fune 2008, France established the High Authority 
for Copyright Protection and Dissemination of Works on the Internet to monitor 
Internet content for Illegal file sharing and eventually suspend the Internet connec- 
tions of repeat file sharers. 24 

European courts have been skeptical of claims to fair use of copyrighted content In 
February 2007, a court In Brussels found that Google, Inc., had violated the copyrights 
of Coplepresse, a Belgian newspaper consortium. The court ruled that by taking head- 
lines and short news extracts from Coplepresse's newspapers, Google's news feature 
Illegally allowed Internet users to read articles without paying proper subschpdon fees 
and without viewing the advertisements on Coplepresse's sites. The court fined Google 
GBP 2.4 million and prohibited It from sampling Coplepresse members' articles, pic- 
tures, or drawings. 25 The court also required that Google remove, within 24 hours, 
any future content that copyright holders said infringed on Its rights, or pay a fine of 
EUR 1,000 per day. 24 Google had similar fair use problems In France when Agence 
France-Presse (AFP) sued the company for USD 17.S million In 2005. The suit was 
dropped In April 2007, following a licensing agreement under which Google could 
use stories and photographs from AFP for Its news aggregator and for other Google 
services. The financial terms of this arrangement have not been publicly disclosed. 2 ’ 
Overall, where the EU has hesitated to take aggressive action on Intellectual property 
regime enforcement, individual states have been eager to step In, enforcing the laws 
of their individual regimes on companies both Inside and outside their borders. 

A controversial Internet piracy bill was adopted by the French Parliament in March 
2009. According to the so-called three-stnkes bill, the French government will launch a 
new agency, HADOPi (High Authority for the Diffusion of Works and the Protection of 
Rights on the Internet), that would assess whether a suspect Is guilty of having violated 
copyright provisions when downloading material online. If It Is determined that the 
user violated a copynght provision, he or she would receive a warning, followed by a 
suspension of Internet access for a maximum of 12 months If he or she did 
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not comply. Critics of the bill stress that cutting Internet access would require a court 
order, which Is not guaranteed by the law at this stage. 

Social Filtering 

On Issues of child pornography, European nations have worked well together to block 
offending content, often recruiting private companies to help them in their cause. 
However, on other social Issues, such as gambling, states have been less effective in 
controlling content, either Individually’ or In coordination with each other. 

The landmark model of large-scale voluntary ISP filtering In Europe originated In the 
United Kingdom. Britain's largest ISP, BT, launched Project Cleanfeed In June 2004,“ 
In consultation with the British Home Office. Under the auspices of this program, 
BT blocks Web sites that the nonprofit Internet Watch Foundation (IWF) declares as 
hosting images of child abuse. When Individuals attempt to access Web sites on IWFs 
list, they receive an error message. 29 If the Web sites are hosted within the United 
Kingdom, the ISP Is required to take down the offending material. Cleanfeed's success 
has inspired imitators: In 2008, the ISP Bnghtvlew began offering a filtering device, 
WebMlnder, free to other service providers. Today, some 90 percent of broadband sub- 
scribers In the United Kingdom have filtering programs of one form or another. 30 

Other countries, such as Norway, Sweden, Denmark, and Italy, have Implemented 
similar programs, though not without controversy. 31 Finland's pilot program received 
negative attention early on when the Finnish National Bureau of Investigation, which 
prepares the list of Web sites to be filtered. Included laplspomo.lnfo— a Web site dis- 
cussing the Issue of Internet censorship — on the list. A 2005 effort by German search 
engines to delist harmful content providers came under criticism when the search 
engines refused to say which Web sites were being removed. 32 

In December 2008, the Romanian Regulatory Authority for Communications and 
Information Technology on the basis of Law No. 196/2003 ordered ISPs to block access 
to 40 Web sites containing Illegal material. If an ISP does not execute such a blocking 
order within 48 hours, it may be fined between ROL 100,000 and ROL S00.000.000 
(from USD 41,400 to USD 207 million).** The block lists* contained mainly porno- 
graphic Web sites, although reportedly a well-known user-generated video-sharing site 
was also Included.** The Romanian Regulatory Authority can compel ISPs to block 
access to any Web site that does not comply with the provisions of the law stating 
that pornographic Web sites have to be officially authorized, password protected, and 
charged for at a per-mlnute rate (determined by the site’s operator). 3 ® The authority 
Is not required by the legislation to give an appropriate waiting period to Web site 
owners to comply with these legal requirements; Instead, It can Immediately order 
ISPs to block access. 

Despite criticism, individual countries' efforts at stopping child pornography 
have met with remarkable success. In 2006, the U.K. Child Exploitation and Online 
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Protection Center made 13 arrests In a pay-per-view pornography program. 87 In Febru- 
ary 2007, Austrian authorities were able to uncover a chlld-pomography nng Involving 
more than 2,300 people In 77 countries. 88 

As individual countries have moved to filter pornographic content online, they have 
done so with increasing coordination. Citizens in 19 countries assist In Identifying and 
reporting Illegal content — particularly in the area of child pornography — through a 
network of hotlines established by the EU 89 Recent reports show that the Saw the 
Children Denmark hotline, financed In part by the European Commission's Safer Inter- 
net Plus Program, had nearly 9,000 reports of child abuse Images In 2006 alone. In 2004, 
Spanish police arrested 90 people In the country's largest operation against the distribu- 
tion of child pornography, also facilitated by the hotlines. At the same time, new regu- 
lations at the regional level could force countries to impose stricter filtering regimes 
within their own countries. The new AVMSD requires member states to take measures 
to ensure that on-demand audiovisual services that might seriously Impair the "physi- 
cal, mental or moral development of minors" are made Inaccessible to minors. 40 

While Europe has been very successful In mobilizing filtering technologies against 
child pornography. It has been less successful at coordinating efforts against gambling. 
In 2006, Italy enacted a law that requires ISPs to block the Web sites of gambling oper- 
ators not licensed nationally. In 2007, however, the European Court of Justice ruled 
Italy's law In violation of EU standards. 41 In 2002, Swiss politicians attempted a similar 
block on online gambling. The effort was suspended In 2004, and no further action has 
been taken since A 2007 proposal in Norway blocked access to foreign gambling Web 
sites; Web sites that "desecrate the Flag or Coat of Arms of a foreign nation”; Web sites 
that promote hatred toward public authorities, contain hate speech, or promote racism; 
offensive pornography sites; and P2P networks that offer Illegal downloads of music, 
movies, or television shows. 42 To date, no action has been taken on the bill. 48 

lndlsldual countries have been very proactive In Instituting filtenng and monitoring 
programs to control child pornography. This enthusiasm has extended to EU-wlde reg- 
ulation. However, no such enthusiasm exists for controlling gambling. Filtering, where 
It has been Instituted, has been done at the country, not the regional, level. 

Nationalistic Filtering 

European governments haw not censored direct political opposition. However, they 
have on occasion censored content that had the potential to "threaten national 
Identity." 

In December 2002, a local Swiss magistrate, Fran^olse Dessaux, ordered several Swiss 
ISPs to block access to three Web sites hosted in the United States that were strongly 
critical of Swiss courts 44 and to modify their DNS servers to block the domain www 
.appel-au-peuple.org. 48 The Swiss Internet User Group and the Swiss Network Opera- 
tors Group protested that the blocks could easily be bypassed and that the move was 
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contrary to the Swiss constitution, which guarantees "the right to receive Information 
freely, to gather It from generally accessible sources and to disseminate It" to every per- 
son. 4 ® Nevertheless, the order was enforced, and directors of noncompUant ISPs were 
asked to appear personally in court, or they would risk facing charges. 

On March 7, 2007, TUikey forced ISPs to block YouTube after several videos were 
posted denigrating Turkey’s founding father, Mustafa Kemal Atatiirk, and the Turkish 
flag. In blocking the Web site, Turkish officials Invoked Article 301 of the Turkish Penal 
Code, which criminalizes Insults toward AtatUrk as well as "TUiklshness." Turkey’s 
leading ISP, TUrkTelecom, complied with the order but petitioned the court to allow 
access to the Web site to be restored. The court agreed on the condition that the par- 
ticular videos be removed. The two-day blocking was heavily criticized both within 
Turkey and abroad, and likened to "dosing a library because of a single book that was 
found to be Improper." 47 Yet YouTUbe and similar Web sites were again blocked In 
March 2008 for hosting content insulting to AtatUrk.* 8 

Hate Speech 

Within Europe there Is a general consensus In favor of censoring anti-Semitic or 
Holocaust-denying speech online. Where individual states have more expansive anti- 
hate regimes, they have enforced those laws, with some success, at the national level. 
In 2000, a French court ruled that U.S.-based Yahoo! Inc. was liable under French law 
for allowing the people of France access to auction Web sites that Induded Nazi mem- 
orabilia and demanded that Yahoo block this content in France or face fines 49 Yahoo 
brought a suit In a U.S. District Court In San Francisco, claiming that the French court’s 
ruling was unenforceable In the United States. The U.S. court ruled In Yahoo’s favor in 
November 2001, 40 but in 2004 the Ninth U.S. Circuit Court of Appeals overturned that 
ruling on the grounds that It did not have sufficient jurisdiction over the French par- 
ties. 41 After rehearing the case en bam, the appeals court dismissed Yahoo’s case in 
January 2006.*' Though split, the court reasoned that the fact that Yahoo had com- 
piled voluntarily and removed the offending content precluded dalms as to a possible 
vloladon of the fight to freedom of expression.** 

Similarly, the German Federal Court of Justice ruled In December 2000 that material 
glorifying the Nazis and denying the Holocaust must be censored as per German law, 
regardless of where It Is hosted.** In 2002, the Bezlrksieglerung DUsseldorf (district gov- 
ernment) obliged S6 ISPs to restrict access to four foreign Web sites. 44 The attempts to 
block access have attracted nationwide attendon and met fierce opposldon from users 
and service providers. 4 ® However, neither polldcal demonstrations nor lawsuits have 
been successful In stopping the blockade By the end of 200S, 76 Internet service pro- 
viders had been required to block the named Web sites. 47 

Germany has engaged In other efforts to combat hate speech. According to one study 
published by the Berkman Center for Internet and Society in 2002, about 91 Web 



Europe Overview 


sites were completely or partly’ excluded by the German sections of the search engine 
Google. “ In 2008, about 23 suspects weie apprehended by German police In eight 
German states, and a further 70 suspects had been Identified in the Investigation be- 
cause of their Illegal sale of right-wing extremist material over the Internet. sv 

Holocaust denial is also legislated at the country level. Fifteen European countries 
also have laws against Holocaust denial.'*’ and others ban material that promotes racial 
hatred. These have been harmonized In a protocol to the Council of Europe's cyber- 
crime treaty, which requires that "any written material, any Image or any other 
representation of Ideas or theories, which advocates, promotes or Incites hatred, dis- 
crimination or violence, against any Individual or group of Individuals, based on race, 
color, descent or national or ethnic origin, as well as rebglon If used as pretext for any 
of these factors" and "material which denies, minimizes, approves of or justifies crimes 
of genocide or crimes against humanity" must be made Illegal by the slgnatortes. 61 As 
with all illegal content, once It Is brought to their attention, ISPs must either take 
down or block the relevant Web sites (depending on whether they are hosted domesti- 
cally or abroad). 

One Issue Europe has yet to resolve with regard to hate speech Is whether merely 
Unking to ofiendlng content constitutes a crime. A 2000 case. In which French citizens 
were barred from shopping on Web sites selling Nazi memorabilia, 62 would suggest 
that Europeans would think it Is. Yet. In 2004, the political activist Alvar Freude was 
accused of Unking to right-wing extremist Web sites and was brought to court. A local 
court found this to be a criminal offense. However, the Stuttgart higher regional court 
overturned that decision In 2006 and absolved Freude. 61 

Defamation 

Two forces are Intersecting to shape defamation law in Europe On the one hand, states 
are relying on the "effects test" to determine legal jurisdiction; that Is, so long as harm 
Is done within the country's borders, the in|ured party can sue within that country. 
On the other hand. Individual countries are also exercising comparatively harsh antl- 
defamation laws. Together, these forces mean that more people are being sued outside 
their home countries, and for more money, than ever before. 

Member states of the EU have sought a simplified electronic defamation framework. 
The traditional principle In cases of defamation concerning the media — that the law of 
the country where the defamed person lives Is applicable — creates a strong incentive 
for media to gain a potentially Impractical degree of knowledge about the privacy and 
defamation laws of each European country. In Italy, for example, a man In a cross- 
border custodial battle claimed that his ex-wlfe, now a resident of Israel, was respon- 
sible for posting statements and Images on the Internet that were defamatory of him 
and his ability to care for their two daughters. Italy's highest appellate court, the 
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Suprema Corte dl Cassazlone, overturned a prior verdict and held lhal Italy's laws of 
libel applied to content on foreign Web sites accessible by Internet users In the coun- 
try. 64 Italian doctrine thus supports an effects test for choice of law, similar to that used 
In the United States for personal jurisdiction: If the offending statements, wherever 
posted, created an effect within the country, they are sub|ect to the Italian law. Other 
countries are reaching similar conclusions. The German Federal Court of Justice de- 
cided in 2000 that the Australian owner of an Australian Web site which denied the 
Holocaust could be held liable In Germany. 65 

Simultaneously, antl-defamatlon laws at the domestic level, particularly In Britain, 
have been criticized for leading lo a "Web takedown" culture in which ISPs Immedi- 
ately remove content alleged to be defamatory for fear of lawsuits. A landmark precedent 
in the United Kingdom led the way for the establishment of a "notice and takedown" 
system. In Laurence Godfrey v. Demon Internet Limited 66 a defamatory statement was 
made on a posting to a newsgroup, www.soc.cultiue.thal, available on a server of De- 
mon Internet Limited. Despite Godfrey's request to remove the post. Demon did not 
comply. As a result, he claimed damages for libel under section 1 of the Defamation 
Act of 1996 6 ' and settled with Demon out of court for over GBP 250,000.°“ 

On rare occasions, some countnes have attempted to achieve tight Internet regula- 
tion by subjecting Web sites to mandatory registration under general media laws or 
Internet-specific regulations. Such registration directly submits Web site owners and 
users to civil and/or criminal law liability for content published online, which may 
arise under provisions sanctioning defamation, dissemination of Illegal content, and 
pornography (among others). In some cases such publication may require preapproval 
by a state agency. Poland, for Instance, shows lack of clarity with regard to the 
status of online media. A television broadcast segment that criticized the work of a 
Polish debt collector prompted a series of threatening comments on a forum on the 
GazeUBytowska.pl (Bytow Newspaper) Web site Polish police asked the Web site's 
administrator to give them Identifying Information for the commentators In question, 
but he refused. The police then charged the Web site under article 4S of the Press Law 
Act (PLA) of 1984.'" A local court determined the Web site to be a dally publication 
and therefore subject to the PLA, which provides for punishment for editors who 
publish — even unintentionally — "criminal content," Including threats like the ones 
made In the online forum. The case was appealed to the Regional Court, which ruled 
In February 2008 that Web sites such as GazetaBylowska.pl must be registered,™ A 
ruling of the Polish Supreme Court a year earlier stated that "Journals and periodicals 
do not lose the character of a press release due solely to the fact that they appear In the 
form of an Internet transmission" and that "the publishing of press in an electronic 
form, available on the Internet, requires registration." Subsequently, a Supreme Court 
spokesman emphasized that the ruling was not Intended to suggest that all regularly 
updated Web sites needed to be registered.' 1 
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Together, these two trends — the Increasing use of the effects test and Increasingly 
harsh damages for defamation — have given an Incentive for European countries to 
coordinate antl-defamatlon laws at the European level. 

A 2007 amendment to the Rome II convention attempted to set regional standards 
for the application of antl-defamatlon laws. 1Tie amendment Instructed European 
courts to obey, with some exceptions, the antl-defamatlon laws of the country In 
which the damage occurred. 72 

Surveillance 

European countries have worked to coordinate security directives at the regional level, 
yet these consensus directives have been criticized by outside groups as far too ex- 
treme. The 2006 European Data Retention Directive 73 prescribes surveillance on a re- 
gional level In the public Interest. Because the directive has been transposed Into the 
national legislation of most of the EU member states, ISPs at the local level are required 
to retain specific data pertaining to electronic communications to assist In tracking 
down crimes and for future prosecutions. Such data can be collected through users' 
activities. In particular Internet access, e-mall, and telephony, and can be retained for 
a minimum period of six months but not exceeding two years. 74 The aim is to bring 
about a common code of data retention in order to trace Illegal content and the source 
of attacks against Information systems, and to Identify those who use electronic com- 
munications networks for terrorist activities and organized crime. The data to be 
retained do not concern the content of communications. Yet the directive has inspired 
controversy within member states and was challenged recently at the German Consti- 
tutional Court. 7S 

Yet some countries are far exceeding the scope of surveillance allowed by the EU. In 
March 2007, the Swedish government granted Its national defense Intelligence agency 
the power to monitor all cross-border telephone calls and e-mail traffic, even without a 
warrant. Various critics have raised privacy concerns about the plan, positing that the 
proposal violates privacy rights and breaches EU law. Notwithstanding the criticism. In 
January 2009 amendments to the Swedish wiretapping law entered into force, allowing 
the National Defense Radio Establishment sweeping surveillance powers over online 
activities. The new law allows special state agencies to monitor telephone calls and 
Internet traffic. Including the content of the traffic Itself, which Is outside of the scope 
of the EU Data Retention Directive. In addition, the state agency could develop a plan 
to search for sensitive keywords In transmitted messages and could even require mon- 
itoring content on servers outside the country's borders. 7 ® A nongovernmental organi- 
zation has already brought a case against the new law In the European Court of Human 
Rights. 77 Sweden's own national security police agency called the plan a violation of 
"personal integrity." Such pervasive policies against online activities have triggered dis- 
approval among big International ICT companies, some of which announced that they 
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would cease making significant investments in the country if the controversial law was 
not revisited.” 

A different development of events occurred In Finland, where employers organi- 
zations (reportedly Including handset giant Nokia)''' lobbied strongly for introduc- 
ing legislation that would allow employers to track employees’ e-mails to prevent 
corporate espionage. In March 2009, the Finnish government adopted such a law 
granting employers access to Information about their workers’ messages, Including 
the recipients, senders, and the time when e-mails were sent or received, and whether 
the e-malls contained attachments. The law does not allow the employers to read the 
content of the messages outright. Nonetheless, employers’ otherwise broad rights over 
employees’ electronic communications raise serious privacy concerns. 

Germany, too, Is taking active steps toward increasing government surveillance 
online. A new amendment to the national telecommunication law requires that ISPs 
retain personal data, such as e-mail senders’ IP addresses, recipients’ IP addresses, date 
and time of all messages, IP address for each Internet subscriber, and a unique identifier 
for each client to track online activity. 

Germany’s federal crime police, the Bundeskrlmlnalamt, have not only monitored 
e-mails and chat rooms, but also begun performing so-called online raids." The Idea 
Is to Infect a suspect's personal computer with Trojan horse software to secretly record 
data entered Into the computer. However, this technique remains highly controversial. 
The federal constitutional court ruled in March 2008 that online raids could only be 
used In exceptional circumstances." 1 

In 200S, the Italian government authorized Increased surveillance of the Internet 
and telephone networks. 82 The bill requires Internet cafes to keep photocopies of 
customers’ passports and to periodically submit logs of all Web sites visited to the 
police. 83 The law also Increases licensing requirements for telecommunication service 
operators, making licensing approval dependent upon the existence of satisfactory 
data-monitorlng and retention systems. 84 

In France, two laws have granted increased surveillance powers to the government. 
The Dally Safety Law (LSQ) was approved almost unanimously by parliament on No- 
vember 15, 2001, and the Internet Safety Law (LSI) was enacted on February 13, 2003. 
Together, these laws require that ISPs keep a record of their customers' Internet activity 
and e-mall traffic for a year and that encryption firms assist authorities In decoding 
messages Involved In criminal trials. Additionally, In June 2008 the French govern- 
ment established the High Authority for Copyright Protection and Dissemination of 
Works on the Internet, which will monitor all network traffic for possible copyright 
Infringement. 

Similar surveillance policies were introduced In Poland, with a February 2003 
amendment to the Telecommunications Law. The law requires telecommunication 
companies to provide the police and other state agencies with access to Information 
sent through telecommunications networks for the purpose of national defense, state 
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security, and public order.* 4 The data that may be requested by the police Include 
caller Identification, network terminals and/or telecommunication devices used In the 
connection, data generated during the connection, the circumstances, and the type of 
connection.** 

The Polish government has been criticized for conducting a large number of wire- 
tapping operations that may be seen as an Invasion of privacy. In early March 2009, 
the office of the Polish prime minister announced that It had plans to compile a ‘‘super 
database" of Information on all Polish citizens. The database would be compiled dur- 
ing the 2011 census and would Include Information from the ministries of finance, jus- 
tice, and home affairs, social insurance Information, and Information gathered from 
telecommunications suppliers. The plan has met with outrage from Polish Internet 
users, who claim the database would violate their constitutional rights. The prime min- 
ister's office has since released a statement explaining that the database will only in- 
clude necessary Information. 8 ' It remains to be seen who would then determine what 
Information Is necessary and how Internet users’ right to privacy would be guaranteed. 

The prospect of revenue from online advertising has sometimes driven operators to 
exercise surveillance over their customers’ preferences. Major British operators BT, Talk 
Talk, and Virgin have all signed up to use Phorm, 88 a Web tracking service, which uses 
Information gathered from a user's browsing history to deliver targeted advertising on 
members’ Web sites. An admission has been made by BT that It ran secret trials of a 
new advertising platform among 18,000 of Its broadband customers in 2006 In order 
to determine the operational and technical performance of the service. The platform 
targets advertisements at the operator's customers using their browsing profiles. The 
EU threatened In April 2009 to pursue legal action against the United Kingdom for 
breaching Internet privacy laws by allowing operators to use the platform to track their 
customers’ online activities for commercial gain (estimated at GBP 3 billion a year). 

Conclusion 

Today, Internet content In Europe Is controlled by three groups of factors: region-wide 
organizations (the EU), individual countries, and companies (e.g., ISPs, search engines). 
While governments have been extremely active In promoting filtering technologies for 
child pornography and surveillance technologies for copyright Infringement, they are 
Increasingly finding that they can achieve their alms through Indirect means. Rather 
than passing explicit regulations, governments have pressured companies to volunta- 
rily self-regulate content, be it pornography, hate speech, or content that infringes 
upon copyrights. Such pressures show a creeping tendency toward the second- and 
third-generation controls found elsewhere. 

At the EU level, countries are Increasingly working to harmonize Internet regulation, 
especially with regard to defamatory and pornographic content. Given the significant 
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cultural differences between countries and existing regulatory frameworks, creating a 
common platform for legislation at the regional level Is a slow and complex process. 
Nonetheless, It is increasingly the arena where decisions about Internet filtering and 
monitoring are made. 
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France 



France continues to promote freedom 
of the press and speech online by 
allowing access to most content. 

France's Internet penetration rate Is 
constantly increasing, and the French 
government has undertaken numer- 
ous measures to protect the rights of 
Internet users. Including the passage 
of the Lot pout lu ConfiaiKe dans 
l'£conomle Sumfrlque (LCEN, Law for 

Trust In the Digital Economy) In 2001. However, the passing of a new copyright 
law threatening to ban users from the Internet upon their third violation has 
drawn much criticism from privacy advocates as well as the European Union 


(EU) parliament. 


Background 

As one of the founding nations of European economic and political Integration, France 
Is seen as a key player on the European stage. However, the country sent shockwaves 
through the EU when Its voters re|ected the proposed EU constitution In a May 200S 
referendum.' In May 2007, Nicolas Sarkozy won the presidential election with a S3 
percent majority vote. 2 The current government Is a center-right administration that 
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has sought to reform universities and special pension regimes and to modernize Immi- 
gration and economic policies. 3 

The French government operates under a traditionally highly centralized decision- 
making process. Each of France's departments Is headed by a prefect appointed by the 
central government. Although the process of decentralization began In the early 1980s, 
with regional councils directly elected for the first lime in 1986, It has continued at a 
very slow pace.* 

As established In the 1789 DtckuaUon ties Droit* tie IHomme et da Citoyen (Declaration 
of the Rights of Man and of the Citizen), France adheres to the principle of laicitt. or 
government secularism. Although approximately 85 percent of the French population 
Is Roman Catholic, Europe's largest Muslim and Jewish populations reside In France, 
comprising 10 and 1 percent of the population, respectively. 4 Notably, as a result of 
such staunch secularism, France has banned women and girls from wearing the Islamic 
headscarf in schools, an act which has resulted in criticism from some civil rights 
groups. 6 

France Is a liberal democracy that guarantees freedom of the press and freedom of 
speech.' Article 11 of the 1789 Declaration stipulates that "the free communication 
of thoughts and of opinions Is one of the most precious rights of man: any citizen 
thus may speak, write, print freely, save [unless It Is necessary) to respond to the abuse 
of this liberty. In the cases determined by the law." 8 In addition, the European Con- 
vention on Human Rights, which France signed In 1950, promotes free speech In 
Article 10. 9 

Freedom of speech Is recognized as a constitutional right to be respected by citizens 
as well as by the government during the process of passing new French legislation. 
Indeed, a distinctive feature of the French |udldal system Is that the Constitutional 
Council protects basic rights against potential slolatlons by new laws, and the Council 
of State protects basic rights when they might be violated by actions of the state. The 
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Constitutional Council examines legislation and decides whether It conforms to the 
constitution. It considers only legislation that Is referred to It by parliament, the prime 
minuter, or the president. 10 

If upon examination basic rights are found to be In conflict with each other, the 
Constitutional Council maintains a balance between freedom of speech and such prin- 
ciples as maintaining law and order, proper administration of Justice, and protection 
of Individuals. French law prohibits public speech and writings that Incite racial and 
religious hatred or hatred against people because of their sexual orientation. 11 In addi- 
tion, amendments have been made to France’s 1881 Press Law prohibiting denial of 
the Holocaust and the Armenian genocide. u Those who violate the law face imprison- 
ment and/or a fine of up to EUR 45,000.“ 

Internet In France 

The number of Internet users in France Increased dramatically from 8.5 million users in 
2000 14 to almost 32 million in 2007, with a 51.2 percent Internet penetration rate. 14 
Since 2000, France has adopted Internet technology at a furious pace and has had 
some of the fastest growth rates for Internet usage, PC shipments, and overall infor- 
mation technology spending by businesses, consumers, government, and education 
throughout Europe. 16 Although global Internet adoption and PC sales have shown 
some signs of slowing in recent years, France still witnessed significant yearly gains 
in Internet adoption: In 2005, over 60 percent of adults age 18 or older In France 
used the Internet regularly, representing more than a 12- point increase from 2004 
(when the figure was 48 percent). 17 In addition, the usage of VoIP telephony has risen 
steadily in recent years, and wireless Internet access by handset/cell phone Is expected 
to continue to grow. 18 

Although the French ISP market has begun to expand since privatization, the market 
leader remains France Telecom, a publicly traded company that Is the main communi- 
cation access provider m France. 19 Because of the well-developed information and 
communication technology (1CT) Infrastructure, home access is affordable to most of 
the French population at competitive costs. Since high-speed Internet services were 
Implemented In France In 2001, access has Increased significantly, with more than 
one in five residents having access to high-speed Internet. 20 Public libraries and Inter- 
net caffes, prevalent throughout the country, also provide high-speed Internet access. 

Studies have shown that. In comparison with other European Internet users, the 
French spend a considerable amount of time online. A recent ComScore study revealed 
that French Internet users spent 932 million hours online in February 2009, averaging 
approximately 27 hours per person. 21 According to one report, the most popular on- 
line activities of French Internet users Include social networking, watching television, 
shopping, blogging, and checking the news. 



Legal and Regulatory Frameworks 


The French media are regulated under the supervision of the Cornell Superior Je 
lAudlovisud (CSA, Higher Audiovisual Council). This Independent administrative au- 
thority guarantees freedom of communication and checks whether television programs 
comply with French laws. Special attention is paid to the protection of young audien- 
ces, and equal air time Is allocated to political candidates during election periods. 22 In 
response to market pressures on media pluralism, the government established La Dila- 
tion du Dtvdoppement da MMus (DDM, Department of Media Development) to en- 
courage plurality' of the press and to prevent excessive concentrations of ownership. 23 

Illegal content and activity on the Internet are mainly regulated by the LCEN 2004- 
S7S of June 21, 2004, which supersedes European Directive 2000/3 1/CE 24 Article 2 of 
the LCEN relieves ISPs of civil and criminal responsibility If they had "no knowledge 
of Illegal activity or material" or If they "acted promptly to remove or block access to 
It as soon as they discovered It." 25 Providers are also exempt from civil responsibility 
If they "have no knowledge of how the Illegal activity or material arose." However, 
once a judicial order has been Issued and proper notice given to the hosting Web site, 
the site Is liable for any further reposting of the Illegal materlaL Moreover, a Web site 
can be held liable for redirecting Internet users to another Web site containing unlaw- 
ful Information. 26 This decision has recently been subject to controversy In France — 
discussions mainly focus on the definition of "illegal activity or material" and on the 
need for a clear distinction between editing and hosting activities. 22 

In 2000, a French |udge ruled that U.S.-based Yahoo! Inc. had to prevent French 
users from accessing Web sites auctioning racial hate memorabilia. Yahoo complied 
by prohibiting users from accessing English-language Web sites selling Nazi memora- 
bilia on Its localized French site, yahoo.fr, but claimed that It was technically Impossi- 
ble to ban French users from accessing such content through Its U.S. site. 28 In 2001, a 
U.S. district court ruled that the First Amendment of the Constitution protects content 
generated In the United States by American companies from being regulated by author- 
ities In countries that have more restrictive laws on freedom of expression. 29 

In 2008, France signed an agreement to block access to child pornography, as well as 
Web sites promoting racial violence or terrorism. 30 

Surveillance 

Although the French Constitution does not expressly include the right to privacy, the 
French Constitutional Council held in 1995, 31 and confirmed in 1999, 32 that the right 
to privacy Is recognized as a constitutional right Implicitly Included In Article 2 of the 
1789 Declaration. 33 The civil and penal codes expressly recognize the tort of privacy 
and a penal protection of the nght to privacy, respectively. 34 The 1978 Data Protection 



Ad was amended In 2004 to aeate the Commission Nationak ,/e I'lnfbnnaOque et da 
Liberia (CN1L, National Commission for Information and Liberties), an Independent 
administrative authority designed to ensure the protection of privacy and personal 
data. 3S With a mission of control and Investigation, the CN1L can warn and Impose 
financial sanctions In case of Data Protection Act violations. It Issues an annual report 
based on Its observations. 1 * 

Since the September 11, 2001 attacks on the United States, privacy and data pro- 
tection rights in France have been undermined by two laws: the Lot sur la Seeurlte 
Quot/dleruie (LSQ, Dally Safety Law) that was urgently approved, almost unanimously, 
by parliament on November IS, 2001, and the Loi sui la Stcuritt Inttrleure (LSI, Internet 
Safety Law) that was enacted on February 13, 2003. 17 The laws extend to a year the 
minimum period for which ISPs must keep a record of their customers' Internet ac- 
tivity and e-mail traffic. The LSI authorizes Immediate access to the computer data of 
telecommunications operators, as well as those of almost any public or private in- 
stitution; It also allows |udges to order that "secret methods that cannot be revealed 
for reasons of national defense' 1 be used to decode encrypted e-mail messages. In addi- 
tion, authorities can require encryption firms to hand over their codes so that they can 
read encrypted online messages. 38 These provisions haw been considered as a threat 
to the principle of confidentiality of professional and private communications in 
France. w 

As a result of a campaign strongly focused on security Issues, closed-circuit television 
(CCTV) Is used In France for surveillance in public places so as to prevent criminal 
behavior. In 2007, the French Interior Minister announced that the number of CCTV 
cameras In France would triple by 2009. This policy has been designed and pursued to 
fight terrorism and street crime.**’ 

On May 4, 2008, the French government ordered the creation of biometric passports 
for Its citizens, citing the need to comply with post-9/1 1 U.S. security demands. French 
citizens will now be Issued biometric passports that will Include eight fingerprints and 
a digital picture; the data are then collected in a national database.*' On December 11, 
2007, the CN1L published an unfavorable opinion concerning this project, fearing 
serious damage to private life and Individual liberties. 42 

On Apnl 9, 2009, the Profet de loi Favortsant la Diffusion el la Protection ,le la Citation 
sur Internet (BUI promoting the dissemination and protection of creation on the Inter- 
net), Intended to deny Internet access to users who repeatedly downloaded copy- 
righted content without paying, was rejected by the French National Assembly. 43 
The proposed law (widely referred to as HADOPI, an acronym for Haute Autorltt pour 
la Diffusion da Oeuvra et la Protection des Droits sur Internet [High Authority for Copy- 
right Protection and Dissemination of Works on the Internet), the agency the bill 
would create), backed by President Sarkozy and by France’s film and record Industries, 
was brought to the National Assembly a second time on May 13, 2009, and approved. 
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pending appeal. 44 The European Parliament, however, voted overwhelmingly to add to 
a telecoms reform bill a stipulation that agencies such as HADOPI must first obtain per- 
mission from French courts before disconnecting violators 4S 
The HADOPI law has faced strong opposition throughout France by various groups, 
and an employee of French television broadcaster TF1 was even fired for his opposition 
to the law after a private e-mail sent to his member of parliament was forwarded back 
to his employer. 46 

ONI Testing Results 

The OpenNet Initiative tested two ISPs (Orange and Neuf Cegetel) in France and found 
no signs of filtering; however, manual testing found one Web site, www.aaargh.com 
.mx, to be blocked. The Web site, which promotes Holocaust revisionism as well as a 
boycott of Israel, was blocked by a French court; the court, in turn, has been brought 
into question for not contacting the Web site's hosts before ordering the filtering 47 

Conclusion 

In France, as in other Western countries, concerns over intellectual property guide on- 
line regulatory’ efforts. However, access to the Internet remains relatively’ free, apart 
from limited filtering of child pornography and Web sites that promote terrorism or 
racial hatred. 
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Germany 


Germany Is a country of high Internet 
penetration, at approximately 76 per- 
cent. Occasionally, takedown requests 
and access restrictions are Imposed on 
ISPs, usually with the justification of 
protecting minors or In compliance 
with Germany's objective to suppress 
hate speech and extremism. In April 
2009, the German government signed 
a bill that would Implement large- 



scale filtering of child pornography Web sites, with the possibility for later expan- 
sion. Additionally, the German government recently approved draft legislation to 
Implement data retention. 


Background 

After World War II, Germany was divided into American. British, French, and Russian 
zones. The Federal Republic of Germany (West Germany), a federal parliamentary 
republic, was founded In 1949 out of the three Western zones. The German Demo- 
cratic Republic (East Germany), an authoritarian socialist state, was established In 
the Russian zone. In both states, continuing to uphold the obligations of Germany's 
history and preventing a repetition of extremism have been a priority ever since. In 
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| KEY INDICATORS j 

COP per capita. PPP (constant 2005 international dollars) 

33,181 

Ue expectancy at birth (years) 

80 

Literacy rate (percent of people age 15+) 

99 

Human development index (out of 1 79) 

23 

Rule erf law (out of 211) 

12 

Voice and accountaWity (out of 209) 

11 

Democracy index (out of 1 67) 

13 (Full democracy) 

Digital opportunity index (out of 181) 

19 

Internet users (percent of popxiaticxi) 

76 


Source by Indicator World Bank 2009a, World Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, EconomOt Intelligence Unit 2008, ITU 2007, ITU 2008. 


1990, East Germany |olned the Federal Republic of Germany. Since that time, reconcil- 
ing economic differences has shaped German policy. 

In 1949, West Germany adopted Its "Basic Law" (Grundgesttz)— similar to a constitu- 
tion — which provides for freedom of expression; however, the Basic Law also restricts 
expression that is "offensive, ln|urlous, or Indecent/' 1 Germany maintains a blacklist 
of books, comic books, magazines, videotapes, and music, the so-called hukx. The list, 
odglnally intended to shield youth from pornographic material, has been expanded 
to include other items; In particular, materials that make light of Germany’s history 
and those which promote neo-Nazism or deny the Holocaust have been blacklisted- 2 
Volksveihetzung , defined in Germany as "Incitement of hatred against a mlnonty under 
certain conditions," Is also strictly prohibited and punishable with up to five years' 
Imprisonment-* 

Internet In Germany 

The Internet Is a central part of the German economy. Over the past ten years, fierce 
competition has led to low prices and fueled Internet access. In 2008, Internet pene- 
tration stood at approximately 76 percent* Germany’s primary ISPs are T-Online (47 
percent market share). United Internet (IS percent), AOL (12 percent), and Arcor 
(7 percent). 4 

T-Online Is a spin-off of Deutsche Telekom. Deutsche Telekom Is the former state- 
run telecom, hence Its high market share. Today, T-Onhne provides Internet services 
and software, while Deutsche Telekom maintains the physical connection. Deutsche 
Telekom still owns the majority of the physical network, including 90 percent of all 
existing broadband connections. 

Broadband access In Germany has increased In recent years, from 200,000 In 2000 to 
14.7 million In 2006. Because the service Is Inexpensive, this number Is expected to rise 
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to 213 million In 20 10. 6 In 2008, T-Onllne's DSL flat tate was EUR 10 (USD 15) per 
month. 7 Germany has 16 International Internet exchange points (IXP).“ The largest 
one by far Is the Deutsche Commercial Internet Exchange DE-C1X in Frankfurt, which 
Is the second-largest IXP In the world with an average throughput of 200 Gbps and a 
maximum of more than 400 Gbps. 9 

Legal and Regulatory Frameworks 

The regulator for the telecommunication sector of the economy Is the Buruksndzd- 
gentur (Federal Network Agency), which Is also responsible for the postal service and 
energy services. 10 It has been endowed with authority by the Telekommimlkutiansgesetz 
(TKG, Telecommunications Act) of 2004.” 

The law that concerns the Internet as a medium Is the Tekmediengesetz (TMG, Tele- 
communication Media Law) passed by the parliament In January 2007.” Section 8 of 
the TMG explicitly states that providers are not responsible for transmitted Informa- 
tion, provided they did not Initiate the transmission or modify the transferred data. 

The legal foundations for censorship are grounded In Germany's laws prohibiting 
public Incitement of hatred against a minority (Voiksverhetnmg) and Holocaust denial. 
For example. Section 130(3) of the German Cnmlnal Code notes, "Whoever ... denies 
or renders harmless an act [of genocide) committed under the rule of National Social- 
ism In a manner capable of disturbing the public peace shall be punished with Im- 
prisonment for not more than five years or a fine." 13 Additionally, media considered 
harmful to minors are regulated by the Bundespni ft telle fin iugendgefahidende Medien 
(BP|M, Federal Department for Media Harmful to Young Persons), which traditionally 
censored films, print media, and computer games, but has expanded Its focus to the 
Internet. “ 

Because of the federal structure of Germany's political system, Internet censorship 
can be Initiated at the regional level. In 2002, the Beziiksngenmg Diisseldoif (district 
government) obliged 56 ISPs to restrict access to four foreign Web sites.” Each of these 
Web sites was based In the United States and contained right-wing extremist material. 

The Beziikitegienuig, which enforces the restrictions on Internet speech In the federal 
state of North Rhlne-Westphalla, offered the ISPs a choice of three ways to implement 
the blockade: DNS-blockade, lP-blockade, or usage of a proxy server. 16 An online peti- 
tion condemning these attempts to block access has received more than 26,000 signa- 
tures. 17 However, neither political demonstrations nor lawsuits have been successful in 
stopping the blockade. In the end, the administrative court of DOsseldorf endorsed the 
blockade In 2005.” By now, 76 Internet service providers have been required to block 
right-wing extremist Web sites. 19 

Furthermore, according to a study published by the Berkman Center for Internet 
and Society in 2002, a number of Web sites relating to neo-Nazi, white supremacist. 
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or other objectionable materials were completely or partly excluded by the German 
version of the search engine Google (google.de ). 20 

While cases of blocking might occur Infrequently, takedown requests, many of 
which receive a positive response, occur far more often. For example, as a result of the 
prohibition of Holocaust denial and public incitement of hatred against a minority 
In Germany, complaints have been filed against companies that host such content. 
The most prominent example Is YouTube. In August 2007, German politicians and 
the Central Council of Jews In Germany complained about the extremist content that 
was being hosted on YouTube. 21 A YouTUbe spokesman promptly promised to Im- 
prove the system of takedowns to comply with the demands of German law. 22 

A related Issue Is the political and |udlclal debate over whether Unking to presumably 
Illicit content Is illegal. Several Instances of this Issue have been recorded. For example, 
in 2004 the political activist Alvar Freude was accused of Unking to right-wing extrem- 
ist Web sites and was brought to court. Freude had documented the censorship by the 
DUsseldorf district government mentioned previously and had linked to blocked Web 
sites. The district court found him guilty. However, Stuttgart Regional Court over- 
turned that decision In 2006 and acquitted Freude. 2 * 

In another case Involving prohibited online material, the Federal Court of Justice 
decided in 2000 that the Australian owner of an AustraUan Web site denying the Holo- 
caust could be held Uable In Germany. 2 * 

Another reason provided for Internet blocking Is the protection of minors. The legal 
details are regulated In the lugendschutzgesetz (JuSchG, Youth Protection Act) 24 and the 
lugaubnedtenschua-Staatsvertrag (JMStV, Youth Media Protection TYeaty). 26 The JuSchG 
regulates TtagtrtwJlen (physical media) Uke books and videos. The JMStV regulates 
broadcasts and Telanedien (transmitted media) Uke the Internet- 
More generally. Section 184(1) of the German Criminal Code states, "Whoever, In 
relation to pornographic writings . . . offers, gives or makes them accessible to a person 
under eighteen years of age . . . shall be punished with Imprisonment for not more 
than one year or a fine." 27 In addition, the dissemination of pornographic perfor- 
mances through electronic media Is prohibited If the provider does not ensure by tech- 
nical or other means that the performance Is not accessible to persons under 18 years 
of age (Section 184d of the German Criminal Code). These laws are taken as a require- 
ment for Web sites with adult content to implement a strict age verification system. 
For example, FlKkr has compUed with this perceived requirement by prohibiting 
German users from accessing photos marked "restricted." 28 

Since the amendment of the JuSchG and JMStV In 2003, the BPjM has maintained 
a blacklist of Web sites. In order to avoid widespread publicity, this blacklist Is not 
published. One may Inquire as to whether an Item Is on the blacklist by e-maUlng 
Ilste4rbundespruefstelle.de. 29 At the time of writing, the BPJM Web site stated that the 
number of censored Web sites was 1,948.*° 
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In February 2005, Google Germany, Lycos Europe, MSN Germany, AOL Germany, 
Yahoo, and T-Online agreed to self-iegulale their search results under the head of the 
Fretwillige Stlbstkantrrile Multmedta-Diem leanbieter (FSM, Voluntary Self-Regulation of 
Multimedia Service Providers). 31 The FSM Is a self-regulatory body for multimedia ser- 
vice providers funded by several Internet companies In 1997. One of the FSM’s policies 
Is to exdude Web sites that have been blacklisted by the BP|M from the search Indices 
of Its members. The current BP|M blacklist Is regularly transferred to a hidden server; 
the search engines then download the list and automatically remove the relevant 
entries. 

A number of cases have been brought to pubUc attention. One In particular Involves 
bmezlne.com, a Web site that "serves to document the activities of the body modifica- 
tion community." 32 In 2005, after BP|M (udged the Web site to be a host of content 
harmful to minors, It required Google.de to remove BMRzlne from Its search results. 13 
A second Incident occurred in late 2007, when German adult content providers sued 
several ISPs in various German states to block several Web sites that contained porno- 
graphic content. 3 * The pages In question were hosted abroad and thus lacked a strict 
age verification system. The district court of Frankfurt ordered the respective defendant 
to block all relevant DNS addresses, while other courts dismissed the actions. 3 ' In par- 
ticular, a request to block Google was dismissed. 36 Furthermore, the Obertandesgeiicht 
Frankfurt (Higher State Court) confirmed another dismissal of a court of first Instance, 
ludglng that ISPs could not be held liable for content that they only transmit. 37 

Surveillance 

Although Internet access remains mostly unrestricted In Germany, Internet users have 
recently been sub|ect to state action. Germany's Criminal Procedure Cock specifies in 
Section 100a that "the telecommunication of an individual may be monitored and 
recorded If: 

1. Specific facts substantiate the suspicion that somebody was the perpetrator or par- 
ticipant In a serious crime as listed In paragraph 2 or. In cases where the attempt Is 
liable to persecution, has attempted to commit such crime, or has prepared such crtme 
by means of a criminal offense 

2. The alleged crime would weigh heavily even taken Individually 

3. Investigating the act or determining the suspected person's location by other means 
would be significantly impeded or futile without surveillance" 

Since January 2008, ISPs and online service providers in Germany have been 
required to retain certain data without Initial suspicion of Illegal activity (Vorratsdaten- 
spet(henung). ia The parliament passed the relevant law in November 2007, 3V which 
Implements a European Union (EU) directive 40 ; prior to Its Implementation, ISPs were 
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allowed lo retain only data required for billing customers. "Hie new law amends the 
Telekomm uiiiku lionsgesetz (TKG). Section 113a specifies that providers of e-mail services 
must retain the following data: 

• If a message Is sent the sender's e-mail and IP addresses, e-mail addresses of all 
recipients; 

• If a message Is received: e-mall address of the sender, e-mail address of the recipient, 
IP address of the sending server; 

• If a client accesses his Inbox: his e-mail address and IP address 

• For all of the preceding: date, time, and time zone. 

Internet service providers, however, must retain the following: 

• IP address of the client; 

• A unique Identifier of the client's landline, allowing the identification of the client; 

• Date and time of the beginning and end of the user’s Internet access. 

The data are then retained for six months. Section 113b establishes that the retained 
data may be used solely for the following purposes: 

1. Prosecuting criminal acts; 

2. Preventing substantial dangers to public safety; 

3. Fulfilling the lawful obligations of Germany's Intelligence offices. 

An additional complaint has been filed at Germany's Bundaverfasssungsgerlihl (Federal 
Constitutional Court) in December 2007, claiming that data retention Is unconstitu- 
tional. In March 2008, the court Issued an !n|unctlon to restrict data retention to ex- 
ceptional cases. A final decision on data retention Is still outstanding. 

Whatever the final judgment may be, the last several years have displayed a clear 
trend toward Increasing Internet surveillance. Motivating factors behind this develop- 
ment Include the impetus to prevent terrorism, to prosecute crimes, and to enforce in- 
tellectual property’ rights. 

Finally, the fear of terrorism and fight-wing extremism has led not only to the mon- 
itoring of e-mails and chat rooms by the BurideskrtniLniilanit (Federal Criminal Police 
Office), but also to the Idea of "online raids." 4 ' This Involves Infecting a suspect’s per- 
sonal computer with Trojan software, which records data entered In order to extract 
the relevant information clandestinely. However, online raids remain highly contro- 
versial. The federal constitutional court ruled In March 2008 that online raids may be 
used only In exceptional circumstances. 42 

ONI Testing Results 

In 2007 and 2008, the OpenNet Initiative conducted testing on T-Onllne, Arcor, and 
l&l and found no evidence of filtering, despite Germany's laws prohibiting certain 
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content. After ONI testing, however, the German government signed an agreement 
with five leading ISPs for the filtering of child pornography using DNS tampering. 43 Al- 
though the filters will Initially target a list of approximately 1,000 child pornography 
sites, the Ministry’ of Family Affairs has stated that It could be expanded to Include 
other content In the future. 

Conclusion 

Currently, German users can access the Internet with only mild restrictions. However, 
the April 2009 filtering bill and the recent legislation on data retention could have a 
staggering effect on Web site access and Internet surveillance In the future. The deci- 
sion to Implement a large-scale filtering system follows In the footsteps of a number 
of other European nations, Including the United Kingdom and Scandinavian coun- 
tries, and could prove to be influential for other members of the EU. 
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Italy 


Italy promotes freedom of speech 
online by allowing access to most con- 
tent. However, the Italian government 
has been slow to address many online 
privacy and freedom-of-lnformatlon 
concerns, and Italy lags behind much 
of Europe In terms of Internet pene- 
tration. Italy, like much of the Euro- 
pean Union (EU), regulates certain 
categories of Web sites. Including 

child pornography and gambling. Additionally, a recently proposed law, dubbed 
the Levl-Prodi law, would Impose registration and taxes on anyone creating "edi- 
torial content," Including bloggers. The law, which has faced significant opposi- 
tion, has thus far not passed. 

Background 

Italy has had a multiparty, democratic government since 1946. The 1948 constitution 
was sviltten to prevent a return to early 20th-century fascism, and powers were spread 
among the different branches of government to limit the powers of the head of state. 
During the cold war, the country feared a communist overthrow, and as a result power 
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Italy 


1 KEY INDICATORS | 

COP per capita, PPP (constant 2005 international dollars) 

28,682 

Life expectancy at birth (years) 

81 

Literacy rate (percent of people aqe 15+) 

99 

Human development index (out erf 1 79) 

19 

Rule erf law (out of 211) 

81 

Voice and accountability (out erf 209) 

28 

Democracy index (out of 167) 

29 (Full democracy) 

Digital opportunity index (out of 1 81 ) 

28 

Internet users (percent erf population) 

49 


Source by indicator World Bank 2009a, World Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, EconomOt Intelligence Unit 2008, ITU 2007, ITU 2008. 


was consolidated among centrist patties. This concentration of power led to wide- 
spread corruption, and after the fall of communism the (udlclal branch launched a 
massive Investigation that left no ma|or parties untouched and involved more than 
one-third of the members of parliament. 1 

Corruption continues to be an Issue and has Influenced control over the media, 
particularly television. Prime Minister Silvio Berlusconi, who has held office for three 
separate terms since 1994, has come under scrutiny multiple times for corruption, 
including during the passage of a broadcasting law In 2004 that lifted ownership limits 
for national broadcast channels. Berlusconi now owns three of Italy's seven national 
television networks and several national newspapers* In April 2006, he violated elec- 
toral law three times by exceeding his allotted media time when he broadcast long 
Interviews on his own channels during the parliamentary election campaign. 1 

Internet In Italy 

Internet penetration in Italy stood at approximately 49 percent In 2008.* According 
to the first national study of Internet and computer usage, published In 2007, about 
33 percent of children under age eleven, 75 percent of adolescents and adult women, 
and more than 80 percent of adult men access the Internet each month. 4 As of 2006, 
47 percent of households had a home computer, and 40 percent of households had 
Internet access.® 

The passage of Law No. 58. DLsposIztonLi per la Rifonna del Settore deile Telecormouca- 
zienl (Rules for the Reform of the Telecommunications Industry). In January 1992 was 
the beginning of the privatization of Italy's telecommunications Industry. 7 Previously, 
most telecom services had been provided by a collection of companies managed by the 
liUtuto per la Ricoslruzime IndusOialeftxieta Ualiana L Esercizlo Telecom (Institute for 
Industrial Reconstructlon/ltalian Telecommunications Society, IR1-STET) group, part 




of Italy's state holding company. In June 1994, In compliance with Law No. S8, five 
of these companies merged to form Telecom Italia. Three years later, Telecom Italia 
merged with Societa Italkma L Esercizb Telecom (STET), retaining the Telecom Italia 
name, to form a prWately owned company that Is now the country's largest telecom- 
munications service provider. 

Telecom Italia currently supplies around 7.7 million customers with broadband 
connections, accounting for approximately 80 percent of the market. 8 Other major 
ISPs Include Swiss-owned Fast Web, which senes IS percent of the market,'' Tlscali. 
and Wind, owned by Egypt's Orascom. 10 DSL and dial-up access are also available 
from a number of smaller local and International providers. u The country’s most 
widely available type of broadband connection Is ADSL, which costs between EUR 
19.95 and EUR 40.00 (USD 29.S8 to USD 61.78) per month, with speeds ranging from 
640 Kbps to 12 Mbps.* 2 

Telecom Italia and Tlscali are both tier 2 carriers.* 4 Within Italy, four main Internet 
exchange points operate. In Florence, Milan, Rome, and Turin. 1 * 

Legal and Regulatory Frameworks 

Compared with many of Its European counterparts, the Italian government has been 
slow to come to terms with the digital world, and Its attempts to create and apply 
legislation to the Internet often reflect this fact. In 2000, a group of Internet privacy 
advocates claimed that while Internet censorship was nonexistent in Italy, the govern- 
ment's lack of understanding of privacy and freedom of Information posed significant 
problems for Internet and computer users. 14 In October 2007, the government pro- 
posed a bill, nicknamed the Levl-Prodl law for the lawmakers who proposed It, which 
would require all "editorial product" owners to register with and pay taxes to the 
Registro tlegli Operator! dl Cottiuiucazione. the regulatory authority that oversees media 
and broadcasting. The Intention of the bill was to simplify Italy's publishing laws. 
Howewr, the bill was broadly worded enough to be Interpreted as applying to bloggers, 
Web site owners, and possibly even social network users, and drew widespread criti- 
cism from these sectors, traditional media sources, and civil rights groups as an exam- 
ple of the government's failure to adapt to modernity.* 6 One writer noted that the bill 
contradicted EU directives and, If enacted, could be challenged before the European 
Commission and the European Court of Justice. *' The bill was eventually reworded to 
apply only to commercial blogs; however, the debate continues, as noncommercial 
bloggers with advertising would potentially still be Included. 18 As of November 2008, 
the bill had not yet been decided upon. 

The government has attempted to regulate the Internet with the same laws that 
apply to print and broadcast media. These Include a press law that holds publishers 
responsible for the content of their publications. Applied to the Internet, the law holds 



Web sites responsible for all content they display, ewn user-posted content. Web sites 
with user-generated content, however, are not well suited to this type of supervision. 
The most visible Incident related to this law occurred In November 2006, when prose- 
cutors began an Investigation of two representatives of Google after a violent video 
of four Italian teenagers attacking a disabled student was posted on Google Video. w 
Italian media law restricts the press from publishing anything that might be deemed 
"counter to morality," a restriction Google allegedly violated by falling to check the 
content of the video before It was posted. 20 

In 2006, blogger Roberto Mandril was fined EUR 13.SO0 for criticizing several jour- 
nalists in northern Italy on his blog. The verdict of the case staled that while the state- 
ments were not untrue (they were widely considered to be Inappropriate), Mandnt 
was responsible for everything that was posted. Including some vulgar reader com- 
ments, and that It was his duty to ad as an editor and remove any messages that were 
offensive. 21 

The National Security Committee, established in 2002. handles all Internet-related 
security concerns. The committee Is composed of members from academia, the mili- 
tary, and the legal sector. Some concern has been expressed that nongovernmental 
dvll rights organizations have not been consulted during public hearings held by the 
committee. 22 

Internet filtering In Italy has come to public attention largely through the govern- 
ment's dlredlves to ISPs. In 2006, Italy enaded a law that requires ISPs to block the 
Web sites of gambling operators that are not licensed nationally. The law, which affects 
more than 600 Web sites. Isolates the country's EUR S00 million gambling market 
from all but local operators. Providers that continue to allow users to place bets with 
banned Web sites after receiving a list of the offending sites from the Ammlnistraztone 
Automma iki Monopoll di Slulo (AAMS, Autonomous Administration of State Monop- 
olies, a part of the Ministry of Economy and Finances) may be fined anywhere from 
EUR 30,000 to EUR 180,000 per violation. 23 Internet users who attempt to access the 
Web sites of foreign bookmakers are shown a message explaining that bets must go 
through the proper channels, and are directed to the AAMS. 24 

In January 2007, a law was passed requiring ISPs to block Web sites that display child 
pornography within six hours of receiving a notice from the Ministry of Communica- 
tions. 2 * The Caitro Nazlonal t pa II ConOasto della Fedopomografia (The National Center 
against Child Pornography, part of the Ministry of Communications) Is In charge of 
maintaining a list of these Web sites. After receiving an initial list of banned Web sites 
from the center, ISPs had 60 days to block them at the domain-name level and 120 
days to block them at the IP-address level. 26 

The "it" country code Is regulated by the Reglstro del ccTLD.lt Rules Committee, 
which Is made up of representatives of the Ministry of Communications and various 
Italian Internet associations. 22 Actual registration takes place through private "Maln- 
talners" who register and maintain domain names on behalf of customers. Malntalners 
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must be licensed businesses In Italy and are required to pay an Initial lee of EUR 2,500 
to the registry. This lee Includes start-up costs lor the first year and 60 domain names, 
with Invoices lor additional domain names sent separately. 28 

Internet Surveillance 

A July 2002 EU directive Instructs ISPs and telephone companies to temporarily retain 
all records ol user activity and make these available to legal bodies, to the extent that 
doing so "constitutes a necessary, appropriate and proportionate measure within a 
democratic society to safeguard national secudty (l.e. State security), defense, public 
security, and the prevention. Investigation, detection and prosecution ol criminal 
offences or ol unauthonzed use ol the electronic communication system."** 

As part ol a set ol antltenodsm measures passed in July 2005, the Italian government 
authorized Internet and telephone network surveillance. 30 The bill requires Internet 
cafes to keep photocopies ol customers’ passports and to submit periodically logs ol 
all Web sites visited to police headquarters. 31 The law also raises licensing requirements 
lor telecommunication service operators, making licensing approval dependent upon 
the existence ol satlslactory data-monltorlng and retention systems. 32 In addition, the 
bill calls lor the compilation ol a list ol all ol ltaiys cell telephone users 33 
Public reaction to the bill has come mostly Irom business owners, who complain 
that complying with the new regulations Is expensive and cumbersome. 34 Several 
Internet calf managers have seen drops In business, prlmahly Irom lorelgn customers 
who have lorgotten their passports or who are unaware ol the Identification require- 
ment. 34 Most Internet users seem to view the bill as innocuous, perhaps because Inter- 
net cafes cater more to tourists than to Italian citizens. A bill requiring ISPs to monitor 
Internet activity and to store user data lor five years, which would have affected all 
users, failed to pass in 2003 after protests by activists and opposition parties. 36 

ONI Testing Results 

The OpenNet Initiative completed testing on lour Italian ISPs: iNet, 32 Inlostrada, 38 
Telecom Italia, 3 * and Tlscali,* 0 and was able to confirm that one gambling site, 
partypoker.com. Is blocked by Telecom Italia and Tlscali. The ONI was unable to con- 
firm with certainty that the other ISPs have also blocked the Web site. 

Conclusion 

Although Italy has regulations In place to prohibit access to Web sites within certain 
categories, access to the Internet remains relatively free apart from limited filtering, 
particularly ol gambling sites. However, the potential passage ol the Levl-Prodi law Is 
a cause for concern, as are the government’s efforts to Increase Internet surveillance. 
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Nordic Countries 


The five Nordic countries — Denmark. 

Finland. Norway, Sweden, and Ice- 
land— have become central players In 
the European battle between file shar- 
ers. rights holders, and ISPs. While 
each country determines Its own des- 
tiny, the presence of the European 
Union (EU) Is felt In all legal contro- 
versies and court cases. The Internet 
Industry extends across borders, and 

so do filtering, military surveillance, and the monitoring of users. Privacy Issues 
were formerly a concern of the elite, but with the growth of the Information soci- 
ety, the right to privacy Is now being discussed more widely In different political 
contexts. A popular civil rights movement of file sharers and privacy advocates has 
arisen out of Sweden In response to both national and International trends, and 
digital rights activism Is Increasingly directed at the European Parliament. Single- 
Issue political parties concerned with privacy have now also begun to form In 
countries outside Europe. 



Regional ICT Penetration 

The World Economic Forum 1 ranks the Nordic countries at the very top of Information 
and communication technology (ICT) use in the world. All five countries were listed in 
the top ten of a 2008-2009 survey prepared in partnership with the International busi- 
ness school 1NSEAD. 2 

The Nordic countries each have broadband Internet penetration rates of more than 
30 percent of the population. According to a survey by the Organization for Economic 
Cooperation and Development (OECD) from |une 2008. this figure places them in the 
top eight In comparison with the organization's 25 other member countries: 3 

1. Denmark 36.7 percent (1,996.408 subscriptions) 

3. Norway 33.4 percent (1,554,993 subscriptions) 

5. Iceland 32.3 percent (98,361 subscriptions) 

6. Sweden 32.3 percent (2,933,014 subscriptions) 

8. Finland 30.7 percent (1,616,200 subscriptions) 
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Regional Regulation 

Norway and Iceland are the only Nordic countries that are not members of the EU. 
However, they do form a part of the European Economic Area (EEA) and have officially 
agreed to enact legislation similar to that passed In the EU In areas such as consumer 
protection and business law. As a result, laws are integrated In Norway 4 and Iceland 4 
differently than In Sweden, Denmark, and Finland.® 

Directives passed by the EU Commission and the European Parliament form a frame- 
work for lawmakers In the 27 member states to Implement their own national laws 
before a certain deadline. Countries may decide to pass tougher laws than required by 
a directive. A key to understanding the heated European struggle surrounding Intellec- 
tual property Is an antipiracy directive called the International Property Rights Enforce- 
ment Dlrecme (IPRED) 7 . This directive gives nghts holders wide-ranging freedoms to 
Investigate the Identities of suspected file sharers and to obtain court orders to force 
ISPs to share personal Information about customers suspected of digital piracy. The 
IPRED was Introduced In 2004 and was repeatedly revised over the following years after 
complaints that Its criminal-sanctions provisions were too wide ranging. An amended 
proposal (IPRED2) that may reintroduce some criminal sanctions was still being 
debated In 2009* However, the Anti -Counterfeiting Trade Agreement (ACTA) being 
secretly negotiated 9 between the EU, the United States, and other countries seems to 
have taken over momentum from IPRED2. 10 

Sweden became the first EU country to put IPRED Into effect on Apnl 1, 2009. The 
BBC reported that Internet traffic in Sweden fell by 33 percent when the law was 
passed." To protect the privacy of their customers following the Implementation of 
IPRED. Swedish ISPs threatened to erase all their IP-number data. 12 Broadband operator 
AlITele offered their customers "dls-ldentlficatlon" services to hide file sharers from 
Investigators. ,J Another ISP, ePhone, refused to hand over any data to the courts. 14 

In early 2009, such actions were not against Swedish law," but they may be when 
another EU data-retentlon (logging) directive 1 ® Is Implemented. Swedish lawmakers 
are working on a proposal for a law that would force ISPs to store data for at least six 
months. 17 

File shaHng Is extremely common In Nordic countries. The Swedish newspaper 
Svatska Dagbladet reported that 79 percent of Swedish males aged IS to 29 are against 
the IPRED law.'* Open wireless local area networks (WLANs) have become an Issue 
under IPRED, as Innocent subscribers may be liable for illegal downloads by others. 
An IPRED-reststance movement started In Sweden encouraging people to open their 
networks and rename them lpredia to mask actions by Individuals. 19 
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Copyright 

The battles over copyright, private file sharing, and large-scale dissemination of links 
In the Nordic region are primarily playing out In the courts under the close watch 
of international organizations like the International Federation of the Phonographic 
Industry (IFTM). One Swedish court case over a file-shanng site has earned the most 
notoriety, but there have been several other cases In neighboring countnes where 
copynght disputes ended in Internet filtering. 

The Pirate Bay Is a Swedish Web site that tracks BltTorrent files. 20 The Web site has 
an estimated 22 million users and Is one of the Internet’s largest sources for file shar- 
ing. While It Is predominantly known for Illegal P2P file shanng of music and films. It 
also handles links to content that can be legally shared. The fate of the Pirate Bay Is the 
sub|ect of a court battle as well as a forceful grassroots Swedish political movement that 
has resulted In the creation of a new political party called Plratpartlet (The Pirate 
Party).*' 

In Denmark, any attempt to access the Pirate Bay using a Danish ISP leads to a block 
page with links to a January 2008 ruling In a Danish civil court that all access to the 
Web site should be blocked. Rights holders onglnally filed the case against the Danish 
ISP Tele2, which today Is owned by the Norwegian telecom Telenor. The Danish na- 
tional court. 0stre Landsret, confirmed the decision on November 26, 2008. 22 

In Apnl 2009, the Pirate Bay case** was submitted to the Danish Supreme Court. The 
basic question for the court to consider Is whether an ISP can be charged with blocking 
access to a Web site, and whether the ISP, as the provider of the connection, can be 
held responsible for any content transmitted. Thus, the case Is about the Danish inter- 
pretation of the EU Infosoc** directive on copyright and related rights, often called the 
Information Society Directive. Danish and Swedish parliaments and courts disagree on 
the interpretation of this directive. 

This is not the first case of Its kind In Denmark. In March 2006, the country's largest 
ISP, TDC, was forced to block certain IP addresses used for the transmission of copy- 
righted material by a Supreme Court decision. 24 The court declared that the transmis- 
sion of copyrighted files was equal to temporary unauthorized copying and thus Illegal. 
Court orders in 2007 forced Danish ISPs to block access to two Russian file-sharing 
Web sites, AUofmp3“ and MP3Sparks. 

On April 17, 2009, the four founders of the Pirate Bay were sentenced to one year in 
prison by a Swedish lower court and a combined fine of 30 million Swedish krona 
(USD 4 million). The Stockholm District Court determined that the defendants worked 
as a team In the operation and development of the Web site and that they had been 
aware that copyrighted material was being shared. 

The convicted Individuals filed a complaint that the presiding |udge was biased, as 
a member of pro-copyright organizations. To the chagrin of the defendants, the court 
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official charged with deciding whether the first |udge was biased was also known to 
have connections to pro-copyright organizations. 27 Furthermore, the Judge 2 " selected 
for the appeal case was a member of a pro-copyright group until 2005. 

The Norwegian private law firm Slmonsen Advokatfirma DA In 2007 obtained per- 
mission 29 from the Data Inspectorate (Datatllsynet) to register the IP addresses of users 
suspected of engaging in Illegal file sharing. The firm represents rights holders. After 
not receiving assistance from the Norwegian police, the law firm attempted to have 
ISPs hand over the subscriber Information associated with these addresses. Slmonsen 
also drafted a cease-and-desist letter, which they requested the ISPs forward to copy- 
right Infringing customers. The International Federation of the Phonographic Industry 
asked Norwegian ISPs to block file-sharing sites, like the Pirate Bay. The ISPs refused to 
cooperate. 

In a May 2009 copyright case regarding the Norwegian movie Max Manus. Slmonsen 
sought a court order to get Norway’s largest ISP, Telenor, to release the subscriber Infor- 
mation of a person suspected of sharing the film Illegally. The ruling was made In the 
lowest court (Stavanger Tlngrett) on May S, 2009, but the verdict was kept secret at 
the request of the film Industry. 10 In fear of Swedlsh-style IPRED conditions, attempts 
are being made In Norway to Initiate protests against secrecy. 11 The case determined 
whether private industry (ISPs) or public authorities are the ones responsible for inves- 
tigating breaches of law on the Internet. Dealing with a basic principle, the case Is 
expected to be pushed Into higher courts. 

Norwegian telecommunications company and ISP Telenor has said that It Is Indiffer- 
ent to preceding Swedish or Danish court decisions. A spokesperson for the ISP said the 
company would conform exclusively to the rulings of Norwegian courts. At the same 
time, a spokesperson for the Norwegian activist group FrlBlt rejected the idea that the 
Max Matuis case had any significance, and said, "Die Pirate Bay will continue and there 
are lots of other services like theirs . . . the ruling gives no cause to automatically use 
other means, like censorship, to stop pirates." 12 The fault lines In Norway are similar 
to the conflicts In other Nordic countries, but the solutions may not be Identical. 

Filtering 

Internet service providers in all Nordic countries deploy filtering to Isolate Web sites 
distributing child pornography. However, other Infringements on freedom of expres- 
sion and privacy have been controversial. Additionally, suspicions that the filters put 
In place could eventually be used to filter other sites have resulted In protests from 
many privacy and advocacy groups. 

Nordic ISPs participate In the International Association of Internet Hotlines 
(INHOPE) project with 35 member countries. 11 Suspicious links are reported by organ- 
izations and the general pubUc and passed on to relevant authorities for verification. 
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Partners In Denmark and Finland are Saw the Children, and in Iceland, Helmlli 
& Skoll. Financing originates liom the EU Safer Internet Plus Program fund.* 4 The 
Swedish nongovernmental child protection organization ECPAT does a similar fob. In 
Norway, there Is no official nongovernmental Involvement. 

Finland has a law to stop distribution of child pornography.* 5 According to Section 
1 , the law was created to protect children and to block access to child pornography 
sites that are hosted outside of Finland. Finland also has laws against mocking God or 
religion (Criminal Act. Ch. 17, Sec. 10), but so far no content of this nature has been 
filtered. 

The Finnish National Bureau of Investigation (NB1) compiles a secret list of Web sites 
containing child pornography and distributes It to ISPs for filtering. 16 In February 
2008, the Electronic Frontier Finland (EFF) published an analysis of "Finnish Internet 
censorship."*' According to the report, the NBI filtering list contained about 1,700 
Web sites in 2008. The EFF stated that a number of nonpornographlc Web sites were 
found on the list. 

In early 2009, the Web site Wlklleaks,** which collects evidence of corporate and 
government misconduct, published a list of 797 Web sites censored by Finland. These 
were originally harvested and published by a well-known Finnish "white hat" hacker 
and activist Mattl Nikki.* 9 The list Included his own Web site lapslpomo.lnfo. where 
he criticizes secret censorship. Mattl Nikki argued that there were several legal Web 
sites on the blocked list. On February 17. 2008, he stated that "nearly none of the sites 
on the child pom list seem to contain child pom." 40 On March 23, 2009, all charges in 
a criminal Investigation against him were dropped. 

The blacklist operated by the Danish child pornography filtenng system (3,863 
blocked URLs) was leaked 41 on December 23, 2008, and made available online. Its pub- 
lication was a protest 41 against secret censorship systems** and was supported by an 
activist group. IT-Polltlsk Forenlng. All Danish ISPs filter content based on the list. 
The head of the Telecommunication Industries Association of Denmark 44 says the 
list Is of Web sites the authorities deem Illegal, and that It should be expected to 
contain not only child pornography, but also racist, offensive, and libelous material. 
The Danish police rr Investigation unit N1TEC Insists their list consists of Illegal por- 
nography sites only. 45 The Danish ISP Industry staunchly refuses to filter questionable 
content (like gambling sites) unless they are contrary to statutory law or unless 
required to do so by court order. Attempts by politicians have been made In Denmark 
and other Nordic countries to protect government gambling monopolies from popular 
online poker. 

All Norwegian ISPs operate a voluntary Child Sexual Abuse Antl-DlsUlbutlon Filter 
(CSAADF). The filter Is a blacklist of DNS addresses maintained and distributed by 
Krlpos, the Norwegian police agency that deals with organized, financial, and other 
serious crimes. Each ISP implements this blacklist In Its DNS servers by redirecting 
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attempts to access blacklisted Web pages to a page with a warning message. 4 ® The list Is 
generated without judicial or public oversight and Is kept secret by the ISPs using It A 
list of supposedly blocked addresses was posted to Wlklleaks in March 2009, contain- 
ing 3,518 DNS addresses. 47 According to Wlklleaks, many of the sites on the (Norwe- 
gian) list had no obvious connection to child pornography. The Norwegian and 
Danish lists had 1,097 URLs In common. Police In Germany raided the owner of the 
German Wlklleaks domain name (a minor site) In March 2009 48 because the Web site 
published copies of Nordic filtering lists. 

As a member of the ERA, Norway has enacted legislation In line with the EU directive 
on electronic commerce, 4 ’' which among other things states that ISPs shall not moni- 
tor their subscribers' use of the Internet. However, the general Interpretation In Nor- 
way of the directive Is that ISPs may be responsible for Illegal content on their servers 
(e.g., child pornography, copyrighted material) If the provider, upon obtaining knowl- 
edge or awareness that such content Is present, does not act expeditiously to remove or 
disable access to the content 

As a result of this directive, some ISPs have devised user agreements that empower 
the service provider to remove any controversial content, including content that Is 
not Illegal, to protect themselves from being held liable in any controversy surround- 
ing content. 

For example. In February 2008 the Norwegian ISP Imbera removed Images of the 
Danish "Muhammad cartoons" from the Web pages of one of their customers, an or- 
ganization called Human Rights Service, on the grounds that Imbera’s user agreement 
prohibits users from uploading controversial content to lmbera's servers. 50 

In Norway, the police can demand the subscriber information associated with a par- 
ticular IP address from an ISP without a court order. This authority follows from a 
Supreme Court decision In 1999, In a case Involving an Internet subscriber suspected 
of dlstnbutlng child pornography. 51 As a result of the ruling, the police can demand 
personal Information in all types of cases. According to press reports, the refusal of 
the police to get Involved In the Max Manus file-sharing case Is the reason Slmonsen 
Advokatfirma DA had to go to civil court. 

Surveillance 

All Nordic countries hold freedom of expression In high regard. Having military Intel- 
ligence agencies monitor private citizens’ telecommunications in detail and without 
controls has stimulated emotional debate and antisurveillance movements. The two 
major forces behind the legal changes In the Nordic countries are fear of terrorism 
and infringements on copyright. Government surveillance and censorship do not sit 
well with the Nordic notion of being free and democratic societies, and the introduc- 
tion of new measures has created an unusually emotional debate in the region. 
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A suivey of global surveillance activity by Privacy International In 2007 characterized 
Denmark as the only Nordic country that Is an "extensive surveillance society," while 
Finland, Sweden, and Norway were listed as exhibiting "systematic failure to uphold 
safeguards."” This classification included areas of privacy outside of digital life like 
democratic safeguards, visual surveillance, and workplace monitoring. Iceland had 
"some safeguards but weakened protection." Denmark was placed In the same category 
as Bangladesh, France, India, Lithuania, the Philippines, and Romania, and was also 
the only Nordic country facing a "deteriorating situation." Privacy International also 
publishes critical Country Reports Overviews* 3 of current developments (latest dated 
December 14, 2007) In each country and wide-ranging In -depth analysis** (latest De- 
cember 12, 2007) of each country (except Iceland). 

The Danish national police IT-Efterforsknlngscenteret (NfTEC), the center for IT 
Investigations, Is in charge of the blacklist for filtering child pornography sites. The 
unit has reportedly been investigating techniques for monitoring and deciphering con- 
versations on the free online telephony service Skype. 44 The Danish police refuse to 
discuss their Investigation methods. At the ED level, the Judicial cooperation unit, 
Eurojust, 4 ® has mentioned Skype's desire to cooperate with Ell authorities, dating 
back to 2006. 

On September 15, 2007, every Danish Internet user came under a comprehensive 
surveillance system, covering their history of Web sites visited, Incoming and outgoing 
e-mails, and use of cell phones. The Danish Implementation of the EU "data logging 
directive"” forces telecommunications companies, ISPs, hotels, Internet cates, wireless 
hotspots, and apartment buildings with private Internet service to log and store Infor- 
mation on all personal communication data for at least one year. These logs must be 
made available to police without a court order. The stated purpose Is to fight terrorists. 
Two former heads of the Danish Security and Intelligence Service (PET) 4 * are on record 
as opposing the expanded monitoring as unnecessary, worrisome, and damaging to 
the public's basic democratic rights.” 

In Sweden, no logging law had yet been Implemented In mld-2009, but surveillance 
of cross-border Internet and telecommunications had. Wiretapping and surveillance 
measures In Sweden have become a divisive Issue In recent years. Those advocating 
the need for Increased surveillance point to the threat from International terrorism 
and organized crime, and claim that additional measures are necessary to keep pace 
with changing technology. Opponents claim the measures extending the scope of sur- 
veillance pose a threat to civil liberties. 

Following a prolonged political battle on privacy in the Swedish parliament, a law 
known as the "FRA-law" narrowly passed In June 2008, giving the Swedish National 
Defense Radio Establishment (FRA) the right to monitor all cross-border, cabled com- 
munication traffic."* In practice, all telephone calls, text messages, faxes, and e-malls 
passing Into and out of Sweden became subject to surveillance as of January 1, 2009. 
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Public outrage over the law led to a significant revision in September 2008, and a 
number of wide-ranging surveillance permits were repealed.®' Among the compro- 
mises were requirements that court orders be Issued before monitoring individuals, 
that no communications inside Sweden would be logged, and that the FRA could only 
work on behalf of the government and the military. The FRA thus monitors all "exter- 
nal threats." not Just "foreign military’ threats." 

Almost all telecommunication from Finland to the rest of the world passes through 
Sweden, leading to fear of the FRA-law In Finland. Both Swedish and Norwegian legal 
organizations have filed petitions at the European Court of Human Rights challenging 
the Swedish wiretapping law. 6 * In neighboring Denmark, citizens scrambled to assess 
whether they needed to change ISP and telephone companies in order to avoid being 
monitored. The Danish Federation of Industries, the largest commercial organization 
In the country, Issued an elevated security warning, fearing commercial espionage by 
Sweden, and published guidelines on how to avoid surveillance of data by foreign gov- 
ernments at the end of 2008. 61 

The law regulating the Norwegian Intelligence agency establishes the rules for mili- 
tary Internet surveillance In Norway. 64 It gives the Intelligence Services under the min- 
istry of defense (Forsvarets Etterretnlngst|eneste, FO/E) a very broad mandate to collect 
Information that "serves the Interests of Norway In relation to foreign states, organiza- 
tions and Individuals." They must, however, refrain from collecting information about 
Norwegian citizens or legal entitles, but there seem to be no restrictions as far as for- 
eigners are concerned. 65 

This broad mandate empowers the FO/E to perform electronic surveillance on com- 
munications originating from foreign individuals and organizations at the border. In a 
manner similar to the more explicit Swedish FRA-law. However. It is unknown how the 
FO/E currently exercises its surveillance mandate. 

The legal framework with regard to Internet surveillance by the Norwegian police 
Is the same as for all communications. The existing legal framework 66 for tele- 
phone wiretapping has simply been extended. To Intercept e-mail or to tap an Inter- 
net line requires a court order, and a person under surveillance must be suspected 
of Involvement In a serious crime punishable with ten years or more In prison (e.g., 
espionage). 

Perspectives 

All over Europe censorship and surveillance Initiatives are promoted, like the French 
"three strikes" HADOP1 law against piracy that Introduced online snooping on sus- 
pected file sharers. 67 The law, which has already inspired dones In other EU countries, 
will be challenged because of a recent dedaratlon by the European Parliament that It Is 
Illegal for an EU country to sever Internet access from anyone without the approval of 
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a court.*® In May 2009, the European Parliament went through a new vote on details 
In a revision of the telecom rules directive. 69 Stemming from a Europewide mass mobi- 
lization, the European Parliament, with a large majority, essentially declared Internet 
access to be a fundamental rtght In the EU. 70 At the time of writing, conciliation be- 
tween the European Parliament and the Commission was in progress. Nonetheless, six 
days later the French National Assembly passed the controversial law limiting these 
rights, and the following day the French Senate voted and confirmed the HADOP1 law. 71 

In April 2008, the Danish parliament’s Council on Technology published a report on 
IT security that said Danish Internet users seem to prefer the government having direct 
access to their computers In order to control and update their personal software prior 
to allowing them onto public Web sites. 72 The report stated that users wanted public 
censorship of undesirable Web sites (eg., those known for phishing) and preferred gov- 
ernment security classification of selected software (like Web browsers). According to 
the report, there also seemed to be public demand for the Introduction of hardware- 
based "digital identities," somewhat different from the prevailing secure "digital signa- 
tures." At the same time, fear of surveillance and registration of Individual activities 
online was strong. The people surveyed also preferred that ISPs filter e-mail automati- 
cally rather than having the current opt-in solution. 

The independent Danish rT-Polltlcal Association argued strongly against this vision 
of centralized control online. An extremely successful Initiative of the association has 
been Polipplx, 7 * a Linux-based privacy protection software, distributed widely on CD 
and online. The Danish rT-Polltlcal Association, like Its sister organizations in other 
Nordic countries, is a member of the European digital rights network EDRI, which 
tracks EU and national attacks on privacy. Introduction of surveillance, and limits on 
Internet freedom. The work of EDRI Is considered especially Important because most 
regulation regarding the Internet, copyright, and privacy onglnate from European 
Institutions or from International Institutions with strong Influence In Europe. How- 
ever, the regulations do not prohibit Individual countries from passing their own laws 
In addition to European ones. 

A Swedish public opinion poll 7 * published on May 18. 2009, showed that 43 percent 
of the population had no Interest in the FRA-law. and among those who were inter- 
ested, 34 percent were against and 23 percent In favor. The most critical sector of the 
population belonged to the 15-29 age group. The least worried group was conserva- 
tives over 60. The Issue of privacy for the online generation has gained significance as 
a result of the FRA debate and the Pirate Bay file-sharing case. Indeed, a political party 
by the name Plratpartlet, 74 the Pirate Party, founded in 2006, was Sweden's thlrd-larg- 
est party, with more than 48,000 members, 76 Immediately before the June 7, 2009, 
elections. At the time of wilting, public opinion polls Indicated that Plratpartlet would 
win representation In the European Parliament and In the national parliament, Rlksda- 
gen, in the next general elections (expected In 2010). 
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Conclusion 

because they aie at the foiefiont c f ICT use In the world, the Nordic countries under- 
standably have a lively public debate on copyright and privacy Issues. New trends con- 
cerning online reality will likely originate here. In these countries, rights holders and 
the telecommunications industries are lobbying politicians In support of their different 
Interests. Recent developments In Sweden offer hints that the general public, apart 
from Indulging In massive pirating activities. Is getting Involved at the political level. 

Following the FRA-law revision In Sweden, the governing right-wing alliance is 
deeply shaken by the unexpected and forceful youth movement that draws its energy 
from new age Issues like privacy and file sharing. The Social Democratic Party, the 
originator of the antitenor surveillance law proposal a few years ago, has with Its 
Green center-left partner announced that the Issue of privacy (and the FRA) will be 
hot during the next Swedish general elections (expected In 2010). They intend to 
repeal the bill. 

The battle over FRA In Sweden was fought with modern communication technology 
(e.g., Facebook, Twitter, blogs, texting). The use of new methods for political mobiliza- 
tion has reached critical levels, and activists are entering the political mainstream. 
Issues are crossing borders. 

Political scientists UH B|ereld and Henrik Oscarsson at the University of Gothenburg 
In Sweden ask whether the security Interests of the nation-state are colliding with the 
right to free cross-border communication In International networks. In an article pub- 
lished in the leading Swedish dally Dagens N>1teter on May 18. 2009. they question 
whether the Swedish state Is struggling to retake control of the globally networked 
society’s most valued raw matenal, means of Influence, and driving force: Information. 
These scholars see the Pirate Party as more than a single-issue platform, rather as a 
movement of liberal values, individual freedom, and personal Integrity, where culture 
must be set free and patents and private monopolies opposed. Bjereld and Oscarsson 
believe the party’s adherents favor citizen rights and freedoms, and demand clearer reg- 
ulation and compliance with the social contract between government and citizens. It Is 
a new dvll rights movement of the Information society. 77 

It Is obvious that very strong industrial Interests are Influencing politicians In the 
Nordic countries and Europe. The controversial decision by the European Parliament 
to make access to the Internet a "fundamental right" and the strong response, particu- 
larly in Sweden, from the predominantly young digital grassroots may be a forewarn- 
ing of things to come. The EU and increasingly Its individual members are struggling to 
regulate digital life, white activist users are trying to push back industrial dominance. 

The Nordic countries are historically, legally, technically, and culturally very dose to 
one another, and are all In some way associated with the EU. As more countries 
achieve the high Internet penetration rates of these live countries, we may see similar 
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cultural and political phenomena spilling over to the region, and maybe globally too. 
Already, "Pirate Parties’' have formed or are In the process of being established In 22 
other countries. 7 * Certainly, the outcome of the legal battles regarding copyright, sur- 
veillance, and filtering In the Nordic countries should not be considered as without 
bearing on the wider region in the near future. 
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Turkey 


Stretched between Asia and Europe, 
Turkey amalgamates the cultural, his- 
torical, and sociopolitical diversity of 
two continents. Tire government has 
Implemented legal and Institutional 
reforms driven by the country's ambi- 
tions to become a European Union 
member state, while at the same time 
demonstrating Its high sensitivity to 
defamation and other "Inappropri- 
ate" online content, which has result' 
International Web sites. 





In the closure of a number of local and 


Background 

Turkey was established as a secular state In 1923 by Mustafa Kemal Ataturk. The 
"Father of the Nation" transformed the government from Islamic rule to a secular 
modern state, with laws based upon the Swiss civil code. The principle of secularlty Is 
enshrined In the Constitution 1 to ensure that religious matters do not Interfere with 
state affairs. The Turkish military powers consider themselves to be the guardians of 
secular democracy and In the past have actively pursued this role, resulting In the 
forced removal of elected governments on a number of occasions. The Turkish military 
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1 KEY INDICATORS f) 

GDP per capita. PPP (constant 2005 international dollars) 

1 1 .825 

Life expectancy at birth (years) 

72 

Literacy rate (percent of people age 15+) 

89 

Human development index (out of 1 79) 

76 

Rule erf law (out of 211) 

98 

Voice and accountably (out of 209) 

121 

Democracy index (out of 167) 

87 (Hybrid regime) 

Digital opportunity index (out of 1 81 ) 

52 

Internet users (percent of poptiation) 

33.1 


Source by indicator World Bank 2009a, World Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economist Intelligence Unit 2008, ITU 2007, ITU 2008. 


has developed a long history of Involvement In politics, and as a result the government 
remains dependent upon It to maintain a balance between religious and secular Insti- 
tutions. 

Since Turkey's establishment as a secular republic, the nation has become Increas- 
ingly Integrated with the West through membership In such organizations as the 
Council of Europe, NATO, the Organization for Economic Cooperation and Develop- 
ment, the Organization for Security and Cooperation In Europe, and the G-20 major 
economies. Free expression of opinion in Turkey Is guaranteed by Article 10 of the Eu- 
ropean Convention on Human Rights and Fundamental Freedoms, ratified by Turkey 
In 19S4, and by various provisions of the International Covenant on Civil and Political 
Rights, signed by Turkey- In 2000. 

Despite Turkey's commitment to free expression and freedom of Information, the 
Penal Code broadly restricts such freedoms by criminalizing speech that Insults the 
Turkish nation, Turkish government Institutions, and Turkish ethnicity. A number of 
other legal acts shape the information available on the Internet by allowing state Insti- 
tutions to apply widely filtering and blocking mechanisms In order to prevent illegal 
Information online. 

Internet In Turkey 

Turkey's Internet market Is growing quickly. Internet penetration was at 7.S percent In 
2004, but Increased to 33.1 percent by 2008. The Internet subscribers (l.e., the actual 
number of dial-up, leased line, and fixed broadband Internet subscribers) were |ust 
7.89 per 100 Inhabitants for 2008. 2 Overall, the market witnessed considerable growth 
propelled by the Increase in the number of broadband subscribers during 2006, with 
ADSL being the predominant broadband access technology. 4 




The telecommunications market has seen a major structural change toward liberal- 
ization, alter the fixed-telephony network was opened to competition in 2005. Previ- 
ously a monopoly, Turk Telecom (TO Is still the dominant telecom and broadband 
Internet operator in the country, preserving a de (ado monopoly of the fixed-line ser- 
vices. Before liberalization. Ttuk Telekomunlkasyon A_$. (TUik Telecom) was a state 
company entirely owned by the Undersecretary of the Treasury. After years of national 
debate and International pressure, the company's privatization was carried out in 
November 2005 when 55 percent of the shares were bought by private Investors. 4 Sub- 
sequently, 15 percent of the remaining shares were sold and have recently begun to 
be traded on the stock market. 

There Is a growing number of ISPs In the country. 4 Through Its wholly owned sub- 
sidiary TTNet A.§. Turk Telecom focuses on development of broadband services to 
compensate for the loss of revenue In the liberalized fixed-line voice market. According 
to a report by the National Telecommunications Authority for the telecoms market in 
2007, TTNet had a market share of 95.7 percent in retail ADSL Internet access services, 
while other operators hold the remaining 4.3 percent. 6 The company has announced 
plans to Invest nearly USD 800 million over the next few years In the sector and in- 
crease Internet usage In both urban and rural areas. 7 

Turk Telecom owns international channels for Internet traffic. It operates the Inter- 
net backbone network (through TTNet) and leases lines to other providers. Thus, the 
prices for external and sometimes Internal lease of TTs Infrastructure affect most of 
the ISPs. 

In July 2008, TUrk Telecom began offering VDSL2 (wry high speed digital subscriber 
line 2) service across 73 of 81 provinces. Turk Telecom wholesales this service to ISPs. 
The VDSL2 service Is transmitted over phone lines and Increases the Internet connec- 
tivity in Turkey eightfold, bringing It into the top third of 23 European countries in 
terms of fastest connectivity using DSL technology. 

The main commercial ISPs In Turkey are TTNet. Superonllne. Sabancl Telecom. Koc- 
net. Smile, Doruknet, DoganOnllne, and IsN’et. Superonllne Is owned by the (^ukurova 
Group, which is one of the leading Turkish business conglomerates. 4 Superonllne’s 
lines, |ust like those of other providers, pass through Turk Telecom. Superonllne Is 
awaiting approval of a W1MAX license, which would allow It to provide "triple-play" 
services without being dependent on Turk Telecom’s Infrastructure. 9 

Some of the other main ISPs are affiliated with banking and media groups. Including 
the Sabanad Group's turk.net. Is Bank's ls.net, and Roe's koc.net. Sabancl Telecom was 
created through the merger of TTNet, Sabancl Telecom, and AK Internet. The provider 
offers a range of services (data communications, Internet access, VoIP, and mobile data 
services In partnership with the mobile operator Telslm). 10 In 2006, Saband’s Invest- 
ment In the ISP market reached 63 million bras. 



Turkey has one official Internet exchange point (IXP), the Turkish Information Ex- 
change. or TlX. 11 Established in 1997 as a private initiative with a large number of 
members In Its first years, TlX languished after It was restructured into a company In 
2002.'* Subsequently, a second IXP was established In June 2003 with the collabora- 
tion of a number of leading ISPs. Although this second platform was used extensively 
for a couple of months, the traffic on this exchange point has also declined, starting at 
the end of December 2003, as a result of the severe price competition ISPs faced from 
Turk Telecom.' * 

Following liberalization, Turk Telecom had to transfer Its cable assets to a govern- 
mental entity' (Turksat) responsible for communications satellites as proposed by the 
Turkish Competition Authority. The largest share of Investments in the original cable 
telecoms company was made by private operators. Government control over the tele- 
com pipelines Is expected to be only a temporary solution, but It has caused serious 
concerns among private operators regarding the certainty of their Investments.'* Of 
24 satellite platform operators In the country. TUrksat Is the main one. The company 
Is also responsible for designing the government portal offering e-govemment services. 

The main mobile operator Is the private l\ukcell with more than 28.7 million sub- 
scribers as of March 31, 2006.' s The largely private mobile company Tebim Is second 
with 8 million subscribers, followed by Aria with 4 million. 1 *’ Both Turkcell and Telslm 
have been Issued 25-year licenses to operate In the mobile phone sector. 

Before initiating operation. VoIP operators need to obtain a license. The "Authoriza- 
tion Regulation on the Telecommunications Services and Infrastructures" of August 26, 
2004, states that the general authorization granted to ISPs for performing activities 
does not include provision of VoIP services (Article S.l of Annex A6). Pursuant to Arti- 
cle 4.1. of Annex A9 of the same regulation, the ISPs willing to provide VoIP services 
would need to obtain a license for long-distance telephony services from the Tele- 
communications Authority. However, compared to the environment before the market 
liberalization, VoIP services are more accessible now. There are a number of local VoIP 
clients providing an alternative to Skype that targets Turkish and even International 
markets.' 7 

Legal and Regulatory Frameworks 
Regulatory Framework 

The Telecommunications Authority (TA) was established under Law No. 4502 In 
2000.'“ Prior to that time, the Ministry of Transportation handled regulatory Issues in 
the field of telecommunications. This ministry still approves the changes In license fees 
proposed by the telecoms agency. The so-called Independent regulatory authorities, 
Including the TA, were recently established In Turkey to regulate and monitor sectors 
of strategic Importance for the state.” While these authorities are part of the admlnls- 
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tradve system and are therefore state agencies, they are organized In a manner that per- 
mits a certain level of Independence from the executive body (l.e.. they do not operate 
under the traditional administrative hierarchy; their decisions and acts are not subject 
to the approval or permission of the central administration, nor can their decisions or 
acts be revoked or amended by the central administration). However, certain legal pro- 
visions imply that the central administration, and in particular the government, still 
maintains considerable control over the Telecommunications Authority. Most notably, 
pursuant to Article 8 of Law No. 2813, members of the Telecommunications Board (the 
highest decision-making body- of the TA) are appointed by the Council of Ministers. 
Even the amendments to the law discussed in the following paragraphs do not succeed 
In safeguarding the Independence of the TA from political Interference. 

The Authorization Regulation of the Telecommunications Services and Infrastruc- 
tures of 2004 envisions a permissive regime to the ISPs for entering the local market. 
Providers are required to apply for and obtain a general authonzatlon from the Tele- 
communications Authority to provide telecommunications services. Internet Law No. 
S6S1, established In 2007, expands the group of regulated providers to include all ac- 
cess and hosting providers. 

The Telecommunications Authority Regulation of October 24, 2007, specifies the 
prerequisites that hosting and access providers need to comply with when applying 
for an Issuance, transfer, renewal, or cancellation of licenses and imposes a number of 
responsibilities on providers. One of these charges both the access and hosting pro- 
viders with the duty to remove Illegal content from their system upon notification 
from the Communications Presidency, to the extent that It Is technically possible. 
However, the regulation reaffirms the principle laid out In the Law No. S6S1 that nei- 
ther the access providers nor the hosting providers are under an obligation to ensure 
the legality of the content they provide. 

The licenses granted to hosting providers are valid for five years and are renewable. 
The licenses Issued to access providers are valid for the period dunng which the rele- 
vant provider has been authonzed by the Telecommunications Authority to provide 
telecommunications services. 

Legal framework 

Turkey’s aspiration to Join the EU has been a major influence in driving reform and 
liberalizing Its telecommunications sector. 20 As a candidate to the EU, Turkey Is under 
an obligation to align Its national legislation with that of the EU in all 31 areas of the 
acquis comm unautii ire, which includes telecommunications and IT. The EU's telecom- 
munications policies call for liberalization of the sector with a view to making the EU 
one of the most competitive and dynamic knowledge-based economies by 201 0. 21 

In recent years, Turkey has taken substantial steps to reform Its telecommunications 
laws. In this regard, the adoption of Law No. 4502 in 2000, which provides a legal 
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framework for liberalization of the sector and establishes the telecommunications reg- 
ulatory authority’, Is particularly noteworthy. Furthermore, the opening of the market 
to competition by removal of TUrk Telecom's monopoly In the sector Is another posi- 
tive development. 

Nevertheless, as stated in the 'Turkey 2007 Progress Report," prepared by the Euro- 
pean Commission, a number of Issues still remain to be addressed regarding Turkish 
harmonization of telecommunications laws. In this regard, the licensing regime and 
the high communications taxes imposed on operators are considered particularly prob- 
lematic. 2 * The restrictive licensing scheme Imposed on access providers by the Tele- 
communications Authority Is out of line with the EU directives. Turkey will need to 
abolish Its licensing regime for electronic communications services and replace It with 
a clear, predictable, and transparent general authorization process, as proposed by 
theEU. 

A further concern Is that Turk Telecom's owners possess a 21-year concession agree- 
ment over all equipment, which has to revert to the government at the end of the 
concession. This provision by Itself Is Inconsistent with the overall character of EU tele- 
communications law. 

Turkey Mass Media Laws Regulating Freedom of Expression 

The legal framework that regulates the freedom of expression and freedom of press 
in Turkey consists of the Press Law 23 and the Law on the Establishment of Radio and 
Television Enterprises and Their Broadcasts (the RTUK Law). 24 The current Press Law 
applies only to the print media, while the RTUK Law covers TV and radio broadcasts. 

Turkey's 2004 Press Law No. SI 87 annuls the former Press Law No. S680 and Its 
amendments, which was heavily criticized for bringing Internet broadcasting within 
the ambit of press legislation, thereby subjecting Web sites and ISPs to monltodng 
standards entirely Incompatible with the characteristics of the Internet. 2 * After reaf- 
firming the constitutional principle that the press Is free. Article 3 of the Press Law 
goes on to state that "this freedom may be restdcted In accordance with the require- 
ments of a democratic society to protect the reputation and rights of others as well as 
public health and public morality, national security, and public order and pubUc 
safety; to safeguard the indivisible Integrity of Its territory; to prevent crime; to with- 
hold Information duly classified as state secrets; and to ensure the authority’ and Impar- 
tial functioning of the judiciary." In addition, the Press Law sets certain limits on the 
freedom of press on the following points: 

• Compromising the judicial process (Art 19) 

• Encouraging sexual assault, murder, or suicide (Art. 20) 

• Illicit disclosure of Identities (Art. 21) 

• Failure to publish reply and correction (Art. 18) 



The RTUK Law’s ob|ecllve is "to prescribe the principles and procedures relating to the 
regulation of radio and television broadcasts and to the establishment, duties, compe- 
tence and responsibilities of the Radio and Television Supreme Council." Artlde 4 of 
this law provides an extensive list of broadcasting standards that need to be compiled 
with in TV, radio, and data broadcasts, thereby setting the limits on how the TV and 
radio broadcasting enterprises can exercise their freedom of expression and freedom 
of press. The list risks burdening the media, as It Includes vaguely framed phrases 
such as "national and moral values of the community," "give rise to feelings of hatred 
In the community," and "raise the feeling of fear." The Radio and TV Supreme Council 
Is responsible for overseeing the TV and radio stations’ adherence to these broadcasting 
standards and Imposing the prescribed sanctions in case a violation occurs. Pursuant 
to Article 33 of the RTUK Law, the available sanctions are Issuance of a warning, fine, 
suspension, and revocation of broadcasting license permit. 

Turkey Internet Laws Regulating Freedom of Expression and Freedom of Information 

Until 2005, the Internet in Turkey was a largely free medium. However, In 2005 this 
situation quickly changed when laws were Introduced to restrict Internet content 
Widespread use of the Internet and growing concerns about the uncontrolled amount 
of sensitive content available online pushed authorities to adopt a special law on the 
Internet. The Law on the Internet (or the Regulation of Broadcasts via Internet and Pre- 
vention of Crimes Committed Through such Broadcasts) No. S6S1 was passed by the 
parliament on May 4, 2007, and signed by president Ahmet Necdet Sezer on May 22. 
This law Introduces criminal liability for people who post certain categories of Illegal 
content online. According to this law. If such content Is posted It should be taken 
down immediately either by authorities or by the ISPs themselves. 

The law establishes a model that allows a large group of actors, including the govern- 
ment, to petition the court or the Telecommunications Authority to filter certain Inter- 
net content "Sufficient suspicion" that an offense Is committed Is a sufficient test to 
meet under the Internet Law to allow block of access. As a result of this law and related 
legislation, a number of Web sites have been blocked over the past few years In Turkey. 
This censorship has led to an uproar from large communities within Turkey and 
abroad, and has placed concerns about filtering of Internet content high on the na- 
tional agenda. 

The most common cnme Is posting obscene content — that Is, content In violation of 
Article 8, paragraph A (5) of the Internet Law. Statistics provided by a Communications 
Presidency representative reveal that the posting of obscene content accounts for more 
than half of the total number of court rulings for blocking Internet access so far — S,629 
since November 2G07. 26 The remaining rulings banned access to the following types of 
proscribed content (from most to least common): 



1. Crimes against Atatluk (Article 8/b) 

2. Prostitution 

3. Providing place and opportunity lor gambling 

4. Sexual abuse of children 

5. Encouraging people to commit suicide 

6. Supplying drugs that are dangerous for health 

7. Facilitation of the abuse of drugs 

The second most common reason for shutting down a Web site Is posting content 
Insulting Atatllrk. A number of such incidents occuned In 2007, as this was the first 
year in which sites were blocked under direct application of the Internet Law. For the 
definition of "crimes against AtatUrk," the law refers to Turkish Law No. S816 on 
Crimes against AtatUrk, which criminalizes certain activities against the founder of 
modem TUrkey. As AtatUrk Is the founder of the secular Turkish state, an Insult to 
him Is considered an Insult to Turkey's governing system In general and an act of state 
treason. A closer look at the Internal division between secularists and people of faith 
demonstrates that by Insulting AtatUrk, one Is thought to be Insulting Ihe Turkish 
Interpretation of secularism. 27 

The recent Law No. 5728, dated February 2008, introduces a ninth category of crimes 
in addition to the ones provided in Article 8 of the Law on the Internet. Based on this 
recent amendment, access to content related to unauthorized online gambling and 
betung can be banned. These activities were Initially prohibited under Law No. 7258 
and sanctioned with a fine. Law No. S728, however, penalizes such conduct as a crime 
when carried out online. As evident from these laws, activities In Turkey can be crimi- 
nalized not only In the Criminal Code but In special laws enacted by the Parliament as 
well. 

In addition to the Internet Law, Turkish courts base their access-blocking decisions 
on violations of other crimes and even some private law rules. Based on statistics from 
Turk Telecom, 2 " banned sites based on norms other than the controversial Article 8 of 
Internet Law No. S6S1 numbered 153 In 2005, 886 In 2006, and 549 in 2007. Turkish 
authors 29 referring to Turk Telecom’s statistics state that access-blocking decisions ren- 
dered In violation of norms other than the ones enlisted under Article 8 have been 
based primarily on the following grounds: 

• Downloading of MP3 and movies in violation of copyright laws 

• Insults against state organs and private persons 

• Crimes related to terrorism 

• Violation of trademark regulations 

• Unfair trade regulated under the Turkish Commercial Code 

• Violation of Articles 24. 25, 26, and 28 of the Constitution (freedoms of religion, 
expression, thought, and freedom of press) 



Turkey 


J49 


Under the Internet Law, ISPs become responsible for blocking access to Illegal Web 
content even before the fudge rules so. The Telecommunications Authority Is tasked 
with Identifying the actor responsible for the offensive content. 

The recently created Information Denouncement Center accepts complaints sub- 
mitted by e-mail or phone that report Web sites that allegedly carry content subsumed 
In any of the crimes typified In Article 8 of Law No. S6S1. A complaint against online 
content may be submitted to a prosecuting attorney who then must lodge it with the 
court within 24 hours. In event of an emergency request, the prosecuting attorney may 
Impose a ban on the Web site himself and submit It to a fudge within 24 hours. The 
Internet Law provides for quick procedures and stipulates that once a fudge decrees a 
blocking order, It should be delivered to the relevant ISP for Implementation within 
another 24 hours. Sanctions envisioned for the ISPs or hosts who refuse to block access 
to offensive content include Imprisoning owners or managers for six months to two 
years. 

The law provides that the Telecommunication and Transmission Authority can Im- 
pose bans on Internet sites without a prior Judicial approval If 

• the offending Web site hosts the previously mentioned crimes and Is hosted outside 
Turkey, or 

• a Web site contains sexual abuse of children or obscenity and Its host resides in 
Turkey. 

In this case, the prosecuting attorney may start a criminal action against those respon- 
sible for posting the offensive content once they are 1 denuded. 

In addition to the preceding procedures, anyone may file a formal complaint against 
posted online content with the Communication Presidency, an endty established 
under the Internet Act. An Individual claim may be sufficient to ban an entire site 
when the personal fights of the claimant have been violated. The Individual can di- 
rectly request that the content or hosfing provider remove the offensive content. 

Following the request, the content or hosting provider has to post a response to It 
within seven days on the Web site where the content Is hosted. The provider should 
begin processing the request within two days. If prolonged, the request Is considered 
refected. The next recourse to the aggrieved party’ Is to file a complaint with the local 
Criminal Peace Court within IS days. The court will then make a decision within three 
days without a trial, and this decision can be appealed at a higher court. After the court 
decision, the content or hosting provider must remove or block the content and pub- 
lish a reply to the claimant within two days. Noncompliance with the court decision 
Is sanctioned with Imprisonment. For example, a Google Groups ban was enforced 
following an Individual claim against a blogger who posted a defamatory comment 
about the claimant on the server. 30 
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The Turkish Internet Law provides the opportunity lor Web site owners to exercise 
their right ol reply against a content ban. However, this right is usually given alter the 
site has been already blocked. There Is no guaranteed right ol reply to Web site owners 
whose content has been banned lor a reason other than the ones listed In the Internet 
Law. 

One ol the main concerns with court decisions on Internet cases Is the lack ol pro- 
portionality. When the court considers certain content Illegal, It orders a complete ban 
on the Web site hosting the content, Instead ol only blocking the particular material. 
Typically, the rulings ol the Criminal Peace Court only cite the relevant legal provi- 
sions on which they are grounded and the final court order. This procedure does not 
provide the accused with the rationale behind the decisions, nor does It provide the 
right to delend against the charges. In addition, the time lor submitting the appeal Is 
very short, being only seven days. 

Generally, court rulings in Turkey remain hidden Irom the public eye. The Turkish 
Attorneys Law does not provide guarantees lor publicity ol court decisions without 
regard to the particular type ol dispute. Instead, this law restricts the right to make 
a copy ol a court decision, which lor privacy concerns remains available only to the 
party's attorney. Technically, the Attorneys Law allows all attorneys regardless ol 
whether they are representing parties in a particular case to examine court decisions. 
However, reports Irom ONI field researchers Indicate that attorneys who have made 
requests to review particular decisions Issued In the application ol the Internet Law 
have been denied access by court clerks, because ol privacy concerns. This lack ol 
access makes It difficult lor Web site owners and their representatives to know how 
they can hilly comply with the law. 

Authorities often apply the Internet Law to ban access to online content, as the law 
provides quick enforcement mechanisms. Since the law does not provide the defini- 
tions ol the criminalized activities, the court Irequently relers to a number ol other 
laws In Its rulings. Including the Penal Code and the Law on Crimes against Ataturk. 

Artlcle 301 was enacted Into the Turkish penal code on |une 1, 2005, as part ol a 
package ol penal-law reform enacted prior to Turkey’s proposal for membership Into 
the EU. Between 2005 and 2008, It was used to bring charges In more than 60 cases, 
many ol which were high profile, such as that against internationally renowned novel- 
ist Orhan I'amuk. 11 From Its Inception, Article 301 received significant opposition. Fol- 
lowing the 2007 murder ol Turklsh-Armenlan |oumaltst Hrant Dink, 1 * such opposition 
Increased significantly, resulting in former deputy prime minister and foreign minister 
Abdullah Gill declaring that the law was In need ol revision. 11 On April 30, 2008, the 
law was only slightly modified to Include lighter sentencing. 14 replacement ol 'TUrk- 
lshness" with "Turkish nation” (even though public denigration ol the Turks' culture 
and Identity Is a crime), and a requirement that the justice minister approve all cases In 



which Article 301 Is to be used. 3 * Article 301 has been widely applied by the Criminal 
Courts ol Peace to regulate online activities. 

Any proscnbed content under Article 301 Is Immediately removed without first 
requesting the content provider to remove It. This was the case against YouTube in 
2007 and 2008. The media-sharing site was blocked a number of times, primarily be- 
cause of content that allegedly offended Kemal Ataturk or the so-called "TUrklshness." 
YouTube made an express agreement to take down offensive videos If advised. 36 De- 
spite this agreement, Turkish courts ordered Turkish Telecom to block access to the 
entire site rather than requesting YouTube to take action. 

In addition to Article 301, two other articles broadly limit free speech in Turkey: 
Article 312 of the Penal Law Imposes three-year prison sentences for Incitement to 
commit an offense and incitement to religious or racial hatred, 37 and Article 81 of 
the Political Parties Law forbids political parties from using languages other than 
Turkish In wntten material or at public meetings. The latter affects Turkish Kurds in 
particular. 38 

Defamation 

Defamation Is sanctioned under the Turkish criminal law as well as under the civil law. 
The Penal Code considers defamation an offense against honor. Article 12S, entitled 
"Defamation," contains the following provisions: 

1. Any person who acts with the Intention to harm the honor, reputation or dignity of 
another person through concrete performance or giving impression of Intent, Is sen- 
tenced to Imprisonment from three months to two years or Imposed punitive fine. 

2. The offender Is sub|ect to above stipulated punishment In case of commission of of- 
fense in writing or by use of audio or visual means directed to the aggrieved party. 

3. In case of commission of offense with defamatory intent: 

a) Against a public officer, 

b) Due to disclosure, change or attempt to spread religious, social, philosophical belief, 
opinion and convictions and to obey the orders and restriction of the one's religion, 

c) By mentioning sacred values In view of the religion with which a person is con- 
nected, the minimum limit of punishment may not be less than one year. 

4. The punishment is increased by one sixth In case of performance of defamation act 
openly; If the offense Is committed through press and use of any one of publication 
organs, then the punishment Is Increased up to one third. 

By providing that defamation can be committed by use of audio or other visual means, 
the second paragraph of Article 125 brings defamatory acts committed on the Internet 
within the ambit of criminal law, with the consequence that the persons who commit 
this offense may face Imprisonment or fines. 39 
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Numerous civil law defamation claims have been brought before courts In the recent 
years. The legal basis for civil law defamation claims In Turkish law is Article 41 and 
Article 49 of the Code of Obligations. 

Article 41 contains the following stipulations: 

A person who wrongfully harms arxitlwr either intentionally, negligently or imprudently, is under 
an obligation to compensate the otlver party for this harm. 

A person who knowingly harms another through an immoral act is also under an obligation to 
compensate the other party for this harm. 

Article 49. entitled "Harm to Personal Interests," states the following: 

A person whose personal rights lsave been unlawfully violated Is entitled to bring a claim for 
monetary compensation for the nonpecuruaty damages he lias incurred. 

The Turkish Code of Obligations provides for a civil law claim for defamation where- 
by the claimant can ask for monetary compensation Instead of blocking access to con- 
tent. However, most claimants prefer to turn to the Internet Law's protection when 
such Is provided. One of the reasons for this preference Is that the Turkish Code of 
Obligations bans excessive enttchment through compensation while the Internet Law 
provisions allow claimants to apply for a direct access ban. 

Reports Indicate that the Telecommunications Authority has announced (dans to 
bring defamation carried out online and hacking under the scope of Article 8 of Law 
No. 56S1. thereby providing people whose personal rights have been violated by on- 
line content with an alternative mechanism that would allow them to seek an access- 
banning remedy Instead of monetary damages under the Law of Obligations or fines 
under criminal law. 40 As the procedure for obtaining a remedy under Internet Law is 
more expedient than In civil and criminal law cases, this amendment equips the 
aggrieved party with a much easier and quicker mechanism against online defamatory’ 
content 

Surveillance 

The National Security BUI, or the "Draft Act on National Information Security Agency 
and Its Tasks," does not Include a provision on the Internet. The bill envisages the 
establishment of a national information security agency as a public body. It requires 
the public bodies and agencies as well as private entitles (companies, etc.) to provide 
“national Information" necessary to ensure national Information security to the secu- 
rity agency when requested to do so. "National Information," however. Is vaguely 
defined in the bill's present version. The bill, If enacted, may be used by the govern- 
ment to compel ISPs to supply the state with Information on users’ communications 
and activities at any time. 
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At present, the Telecommunications Authority Regulation of 2007 Introduces state 
monitoring over access and hosting providers and their activities. Article lS-c of the 
regulation stipulates that access providers that cease their operations are obliged to 
submit all records of traffic logs pertaining to their last year of operation, as well as 
their user IDs, to the Telecommunications Authority. 

ONI Testing Results 

Turkey has one main commercial backbone connection, owned and controlled by Turk 
Telecom and the educational network, UlakNet. Most of the filtenng of International 
traffic takes place on the Turk Telecom network, which links to other commercial ISPs 
within the country. Testing by the OpenNet Initiative shows that the academic 
network does not currently engage In hltenng. UlakNet primarily provides Internet 
access to academic centers and some government Institutions, Including the military. 

The ONI testing found a number of sites blocked on Turk Telecom In a variety- of 
categories. Sites containing Information on Turkish Kurds, Including www.pa|k-onllne 
.com, hpg-onllne.com, and the official Web site of the Kurdistan Workers' Party, or 
PKK were blocked. Interestingly, two sites belonging to well-known Muslim creationist 
Adnan Oktar (adnanoktar.wordpress.com and yahyahamn.com) were blocked, as was 
19.org, the site of Oktar's rival Edlp Yuksel. According to some reports, Oktar Is respon- 
sible for the bans on Yuksels sites and Wordpress, as well as the 2008 blocking of evo- 
lutionist Richard Dawkins' site In Turkey. 41 Other blocked sites Included P2P sites such 
as the Pirate Bay (theplratebay.org) and myp2p.eu. Gambling sites were also blocked. 

Since the Internet Law came Into effect, the number of blocked sites has drastically 
Increased. The most high-profile filtering has been of the popular video-sharing site 
YouTUbe.com. YouTube access has been blocked a number of times In 2007 and 2008, 
In response to complaints about specific videos, most of which were considered to 
"Insult Turklshness." Access has been restored following the takedown of each video. 
Wordpress and all blogs on the Wordpress domain, as well as popular blogging plat- 
form Blogs pot, have been blocked and unblocked a number of times as well. 

Conclusion 

Turkey has implemented a series of reforms in Its telecommunications and Internet 
sectors, showing Its firm determination to stay on the membership path to the Euro- 
pean Union. Nonetheless, further reforms are needed to terminate the de facto monop- 
oly of the main telecoms and Internet service provider Turk Telecom. All Internet 
traffic passes through link Telecom’s Infrastructure, thereby allowing centralized con- 
trol over online content and facilitating the Implementation of shutdown decisions. 
Unless the government rethinks Its current Internet policy and abandons blocking 
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Web sites as a method for combating Illegal content, freedom of expression In Turkey’ 
will remain compromised. 
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United Kingdom 


The United Kingdom (U.K) has a no 
table libertarian tradition, manifested 
by, among other things, solid guaran- 
tees of freedom of expression, freedom 
of Information, and protection of pri- 
vacy. Nonetheless, over the last few 
years the country has witnessed a 
quick shift toward Increased surveil- 
lance and police measures in both 
online and physical space. Combating 

terrorism and preventing child abuse have been widely used by state agencies and 
private commercial actors (e.g., Internet service providers) to justify the Imple- 
mentation of interception of communications and direct filtering measures in the 
country, which have drawn growing criticism. 

Background 

The U.K. consisting of England. Wales, Scotland, and Northern Ireland, is a constitu- 
tional monarchy currently headed by Queen Elizabeth II. 1 Previously a colonial power, 
the U.K. emerged from the World Wars as a leading global financial center and West- 
ern democracy. 2 As the country is a member of the European Union (EU), the bloc's 
law takes precedence over national law, with U.K. courts required to recognize the 
jurisdiction of the European Court of Justice (ECJ) in matters of EU law. 
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1 KEY INDICATORS A 

GDP per capita, PPP (constant 2005 international dollars) 

33,717 

Life expectancy at birth (years) 

79 

literacy rate (percent of people age 15+) 

99 

Human development index (out of 1 79) 

21 

Rule erf law (out of 211) 

15 

Voice and accountably (out of 209) 

13 

Democracy index (out of 1 67) 

21 (Full democracy) 

Digital opportunity index (out of 181) 

10 

Internet users (percent of population) 

79.6 


Source by indicate*: Woftd Bank 2009a, World Bank 2009a, World Bank 2009a. UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economist Intelligence Unit 2008, ITU 2007, ITU 2008. 

The U.K. has a vast media network, led by the British Broadcasting Corporation 
(BBC), a publicly funded Institution. 1 with a mandate to remain independent. 4 Other 
media Institutions in the U.K. also en)oy journalistic freedom and represent a broad 
spectrum of political ideas.* Despite the officially recognized journalistic freedom, 
there have been reports of journalists being failed or detained for divulging state 
secrets' The U.K. is a strong supporter of fundamental human rights and freedoms, 
Including freedom of expression. 7 However, recent developments in U.K. antiterrorism 
laws, in particular the Tenortsm Act (2000) and subsequent legislation in 2005 and 
2006, have drawn harsh criticism. Advocacy groups claim that new provisions focused 
on expanding police powers and allowing communication providers to retain personal 
data for the purpose of "protecting national security or preventing or detecting crime 
that relates to national security"* are contrary to basic human rights principles. 9 

Internet In the United Kingdom 

Residents of the U.K. currently form the hfth-largest broadband subscriber population 
in the world. 10 In the U.K., 61 percent of households had Internet access In 2007, with 
84 percent of those hasing a broadband connection. 11 The sector regulator reports that 
broadband technology Is available for practically every U.K. citizen to connect to the 
Internet. 1 * In 2006, 63 percent of adults in the U.K. were estimated to have accessed 
the Internet within a three-month period. 11 Internet usage Is more widespread among 
the younger generations, with over 90 percent of people aged 16 to 24 accessing the 
Internet in a three-month period, and only 24 percent of those aged over 6S accessing 
it dudng the same period. 14 Most of the users access the Internet from their home 
location (87 percent). 15 As a result of affordability and enhanced market competition, 
mobile penetration Is very high. 1 ® However, the percentage of people accessing the 
Internet with their handsets Is surprisingly small (only 3 percent in 2007). 17 
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In 2007, there were around 700 Internet service providers (ISPs) in the U.K. 18 Of the 
broadband providers, however. Virgin Media and BT (formerly Bntlsh Telecom) pro- 
sided services for half of the market; 1 ' along with the three next largest providers, 
they comprise 84 percent of the market. 20 Broadband service has expanded so signi- 
ficantly In the last four years that It Is now more affordable than dial-up service. 21 Cur- 
rently. no restnctlons exist on the amount of Information a user can send and receive 
when subscribing to broadband service, but It Is recognized that network management 
might be required in the future. 22 

In December 2008, the ma|ortty of ISPs in the U.K. agreed to better Inform their cus- 
tomers about Internet connection speeds. This scheme, which would benefit approxi- 
mately 9S percent of the U.K.'s Internet users, was adopted In response to consumer 
confusion about advertisements that promised broadband speeds that were largely 
unattainable. 2 * 

Legal and Regulatory Frameworks 

The telecommunications industries are regulated by the Office of Communications 
(Ofcom). 24 Ofcom's mandate includes, among other duties, the protection of audi- 
ences against harmful material, unfairness, and infringements of privacy. 25 Broadcast- 
ing In the U.K. Is regulated by the Department for Culture, Media, and Sport (DCMS). 26 

As a member state of the European Union, the U.K. has integrated the bloc’s commu- 
nication directives Into Its national law. Hie European Parliament has recently voted 
on the new proposals by the European Commission (EC) to reform the telecommuni- 
cations regulations with the Idea of promoting competition on a pan-European level 
and taking further steps to preserve Information security, Including controlling spam, 
spyware, and other malicious software. 27 Updated regulations are expected to be Inte- 
grated into national legislation starting In 2010. 

In 2000, the EU adopted a proposal concerning. Inter alia, the dissemination of child 
pornography on the Internet. 2 * The notes to the proposal explicitly state that service 
providers normally will not be held liable for any dissemination, caching, or hosting 
of child pornography, though they are held bable If they commit Illegal acts that ben- 
efit the service provider. 2 ' This Is consistent with broader EU law which states that ISPs 
acting as "mere conduits" of Information are not liable for any Illegal Information 
transmitted.* 0 European Union law specifically provides that ISPs are under no obliga- 
tion to monitor the Information they transmit, but they must be able to provide Infor- 
mation on Its transmission given an appropriate request from the government.* 1 

Though U.K. authorities do not oblige ISPs to monitor the Information being trans- 
mitted, at least one ma|or ISP, BT, filters child pornography materials.* 2 However, BT 
stresses that they do not affirmatively search for sites to block, but rather act only 
upon reports by users and information provided by the Internet Watch Foundation 
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(IWF). 11 The implementation of this filtering practice Is known as "CleanFeed." 14 The 
IWF, a nonprofit organization based In the U.K. that works with the U.K. government, 
complies a list of Web sites It deems Illegal and transmits this Information to BT and 
other ISPs. 14 The List complied by the IWF usually contains 800-1,200 unique and 
live URLs. 16 In addition to filtering content for child sexual abuse, the IWF also detects 
and attempts to take down Web sites hosted in the U.K. that promote racial hatred, 1 ' 
which are Illegal under the Public Order Act 1986. 18 

In 2006, Home Office Minister Vernon Croaker announced that from 2008 onward 
he expected that all ISPs would block access to child pornography using a "CleanFeed" 
style system. 1 ” The announcement also suggested that If the filtering was not done by 
ISPs on a voluntary basis. Parliament would consider legislative enforcement. 40 At that 
time, the largest ISPs In Britain, which together provided over 90 percent of all broad- 
band access, all used some sort of filtering system. 41 

The U.K. commissioned a report on child safety on the Internet that was released In 
March 2008 (the Byron Report). 42 This report recognized that It would not be possible 
to remove fully all obscene material from the Internet and that any effective control 
would have to be adopted voluntarily by ISPs. 41 It stated that there was a strong 
case to block Illegal material such as child pornography, though It also recommended 
that no attempts be made to filter Illegal material at the network level. 44 The U.K. gov- 
ernment has agreed to Implement all the recommendations contained In the Byron 
Report. 44 

In December 2008, a number of British ISPs blocked a Wikipedia page displaying an 
Image of an album cover from 1976 that portrayed a naked teenage girl. The ISPs made 
the decision after receiving a warning from the IWF claiming the Image may be Illegal. 
Wikipedia users complained that the ISPs blocked not only the image but the entire 
article; they also noted that the ISPs did not apply the block systematically, as access 
to commercial sites, such as Amazon.com, that sold the album and displayed Its cover 
Image, was still available. 46 Furthermore, the block temporarily prevented users on the 
affected ISPs from editing Wikipedia. 4 ' Several days after the block was Imposed, 
the IWF reviewed the case and decided to remove the article from their list of offensive 
sites, citing the negative effects of the block and the wide availability of the Image on 
other sites. 48 

United Kingdom law requires that information that glorifies or Incites terrorism be 
censored. 4 ” According to section 3 of the Terrorism Act (2006), once provided with a 
notice that a Web site may contain terrorism-related content, an ISP may be liable for 
the content if It does not take every reasonably expected step to block access to the 
content. 40 

Filtering technologies such as the "CleanFeed" system are criticized for not publi- 
cizing the list of filtered Web sites, which could lead to abuses. 41 In addition, because 
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ISPs and the IWF axe not public Institutions, they are not sub|ect to |udldal review. 12 
Instead, the IWF offers an internal appeal procedure. 1 * 

Internet Surveillance 

The U.K, together with the United States, was ranked as one of the worst offenders 
against Individual privacy rights in the democratic world by Privacy International for 
2007. 44 

Among areas of great concern are the estimated 4 million CCTV cameras Installed 
in practically every comer of Bntons’ social life. 11 Based on the EU Data Retention 
Directive but at times exceeding Its scope, the data retention scheme In the U.K. took 
a significant step forward. There are "hundreds of thousands" of requests from state 
agencies to communications providers for traffic data. 1 ® 

In the U.K. the Information Commissioner's Office (ICO) Is an Independent author- 
ity with the goal of promoting access to official Information and protecting personal 
information. It Is also responsible for enforcing the Data Protection Act 1998 (DPA). 17 
The commissioner has a broad mandate but only minimal enforcement powers. 18 A 
new act has been proposed to amend the DPA and give the ICO the authority to 
Impose fines for deliberate data protection breaches. 19 The ICO reports to Parliament 
and Is sponsored by the Ministry of Justice.® 0 Recently, concerns have arisen over ISPs 
tracking user activity to customize viewed ads. 61 The commissioner himself warned in 
2004 that the U.K. was In danger of becoming a "surveillance society." This concern 
was reiterated in the House of Lords' February 2009 report entitled "Surveillance: Citi- 
zens and the State."® 2 However, after a review of the situation the ICO noted that as 
long as users axe "Informed when a cookie Is placed on their computer, given clear 
and comprehensive information about the purpose of the storage and given the ability 
to refuse It being placed on the system . . . there does not appear to be any detriment to 
users," and that the developing companies are not In violation of the Data Protection 
Act 1998. 61 

The U.K government's power to collect communications data Is primarily addressed 
in the Regulation of Investigatory Powers Act 2000 (RIP A).®* Warrants to approve the 
collection of communication content are Issued by the Secretary of State upon proof 
that the Intrusion Is necessary and proportionate when balanced with individuals' pri- 
vacy interests.* 1 The Secretary of State has broad powers that are loosely regulated.*® 
The collection of noncontent data. Including subscriber Information, traffic, and loca- 
tion data, can be authorized without a warrant by various public officials.* 2 

As for other electronic surveillance, the Foundation for Information Polity Research 
notes that even before the events of September 11, 2001, the U.K. was utilizing sophis- 
ticated systems for electronic surveillance against crime. The foundation warns that 
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further "safeguards and democratic oversight" are needed. 68 On May 21, 2008, The 
Guardian warned of the possibility of a database that records every telephone call, 
e-mail, and Web site visit made In Britain. 69 On June 9, 2008, the ICO released a state- 
ment recognizing the necessity to consider the Impact of the development of such 
tools on individuals’ privacy and the need to minimize unnecessary Intrusion. It fur- 
ther recommends that "every possible step ... be taken to ensure public trust in the 
way that personal information Is collected and stored." 70 Although plans for the data- 
base to collect all user information were canceled, the Home Secretary has requested 
that communications firms record contact between customers, including e-mails, 
phone calls, and Internet use, as well as visits to social networking sites. 71 

In a different area, expectations of commercial gain due to online advertising have 
led some of the most Important operators in the country (BT, Talk Talk, and Virgin) 
to use different applications to track the browsing history of their customers. In April 
2009, the EU expressed its Intent to commence legal actions against the U.K. for allow- 
ing this Web-tracking practice, which, according to the EU, would violate privacy laws. 

ONI Testing Results 

The OpenNet Initiative comprehensively tested three ISPs in the United Kingdom: 
Easynet. 72 Be, 73 and BT, 74 and did not find any evidence of filtering; however, the 
U.K. openly blocks child pornography Web sites (which ONI does not test) and has 
allegedly blocked other sites containing "illegal material." 76 

Conclusion 

Protecting freedom of expression and encouraging tolerance to diverse viewpoints, the 
U.K. Is one of the pioneers in nurturing politically sensitive debates and promoting 
the use of new technology. Freedom of expression and protection of privacy over the 
Internet is guaranteed in the law. Nevertheless, motivated by national security con- 
cerns, the state has provided for vast surveillance measures over online communica- 
tions. Moreover, certain filtering and tracking practices do take place. Such practices 
are sometimes encouraged by the state but most often voluntarily implemented by pri- 
vate operators. The U.K. government, however, has to ensure that blocking practices 
do not lead to abuse in the absence of external and independent control. 
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United States and Canada Overview 



The Internet In the United States and Canada Is highly regulated, supported by a com- 
plex set of legally binding and privately mediated mechanisms. Technical filtering 
plays a minor role In this regulation. The first wave of regulatory actions In the 1990s 
In the United States came about In response to the profusion of sexually explicit mate- 
rial on the Internet within easy reach of minors. Since that time, several legislative 
attempts at creating a mandatory system of content controls In the United States have 
failed to produce a comprehensive solution for those pushing for tighter controls. At 
the same time, the legislative attempts to control the distribution of socially objection- 
able material on the Internet in the United States have given rise to a robust system 
that limits liability over content for Internet intermediaries such as Internet service 
providers (LSI's) and content hosting companies. Proponents of protecting Intellectual 
property online in the United States have been much more successful, producing a sys- 
tem to remove lnfnnglng materials that many feel errs on the side of Inhibiting legally 
protected speech. National security concerns have spurred on efforts to expand surveil- 
lance of digital communications and fueled proposals for making Internet communica- 
tion more traceable. 

After a decade and half of ongoing contentious debate over content regulation in the 
United States, the country is still very far from reaching political consensus on the ac- 
ceptable limits of free speech and the best means of protecting minors and policing 
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Illegal activity on the Internet. Gambling, cybei security, and dangers to children who 
frequent social networking sites — real and perceived — are Important ongoing debates. 

Canadian legislators haw been less aggressive than their U.S. counterparts In propos- 
ing specific legislative remedies for problems arising from Internet use. Canadians have 
been more Inclined to employ existing regimes developed for regulating offline speech 
and less apt to propose broad solutions. Canadians do not currently pursue copyright 
lnffingement online with the same zeal as their U.S. counterparts. Neither does Cana- 
dian law provide the same formal protection for Intermediaries. Unlike the United 
States, publishing of hate speech Is restricted In Canada. Under section 320.1 of the 
Canadian Criminal Code, a judge can Issue a warrant authorizing the deletion of (pub- 
licly available) online hate propaganda from computer systems located within the |u- 
nsdlctlon of the court. 

Public dialogue, legislative debate, and judicial reslew have produced filtenng strat- 
egies in the United States and Canada that are different from those described elsewhere 
In this volume. In the United States, many government-mandated attempts to regulate 
content have been harred on First Amendment grounds, often after lengthy legal 
battles.' However, the United States government has been able to exert pressure Indi- 
rectly where It cannot directly censor. In Canada, the focus has been on government- 
facilitated Industry self-regulation. With the exception of child pornography. Cana- 
dian and U.S. content restrictions tend to rely more on the removal of content than 
blocking: most often these controls rely upon the Involvement of private parties, 
backed by state encouragement or the threat of legal action* In contrast to much of 
the world, where ISPs are sub|ect to state mandates, most content regulation In the 
United States and Canada occurs at the private level. 

The United States and Canada both have relatively high Internet penetration rates. 
In each country, nearly three-quarters of the population has access to the Internet.* 
Despite such high Internet penetration rates, the two countries have relatively low 
broadband subscription rates, with the United States at 23 percent and Canada at 28 
percent. Internet subscription rates on the whole are only slightly higher: the United 
States has a 24 percent subscription rate, while Canada's rests at 31 percent.* The 
broadband stimulus push of President Barack Obama's administration In early 2009 
may Improve these rates In the United States. 

These high rates of Internet usage increase the ability of citizens to publish and 
widely distribute dissenting points of view. At the same time, Internet users engage In 
a large number of other online activities, such as accessing pornography, that test a 
society’s dedication to free expression and prls’acy. 

Regulating Obscene and Explicit Content 

The United States Congress passed the Communications Decency Act (CDA) as part 
of the Telecommunications Act of 1996. Signed Into law by President Bill Clinton In 
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February 1996, the CDA was designed to criminalize the transmission of "Indecent" 
material to persons under 18 and the display to minors of "patently offensive" content 
and communications. 4 The CDA took aim not only at the authors of "Indecent" mate- 
rial but also at their Internet service providers, although It offered them each safe har- 
bor If they imposed technical barriers to minors' access. 6 

Prior to taking effect, the CDA was challenged In federal court by a group of civil lib- 
erties and public Interest organizations and publishers who argued their speech would 
be chilled by fear of the CDA's enforcement. The three-|udge district court panel con- 
cluded that the terms "Indecent" and "patently offensive" were sufficiently vague such 
that enforcement of either prohibition would violate the First Amendment. 7 "As the 
most participatory form of mass speech yet developed," Judge Stewart Dalzell wrote in 
a concurring opinion, "the Internet deserves the highest protection from governmen- 
tal intrusion.” 8 The U.S. Supreme Court affirmed this holding in 1997, Invalidating the 
CDA’s "indecency" and "patently offensive" content prohibitions. 9 In the landmark 
case Ram v. ACLU, the Court held that CDA was not the "least restrictive alternative" 
by which to protect children from harm. Rather, parent-imposed filtering could effec- 
tively block children's access to Indecent material without preventing adults from 
speaking and receiving this lawful speech. 10 Other sections of the CDA continue to re- 
main In force. Including Section 230, which provides Immunity to ISPs for content 
that third-party users place online. 11 Section 230 has had an undeniably powerful 
Impact In promoting free speech in the United States. A growing body of case law sug- 
gests that It Is being used by ISPs to settle or quickly dismiss claims that are brought 
against them. 12 Many question whether the sweeping protections offered by Section 
230 offer In fact too much protection for online speech and excessively limit the ability 
of victims and the state to suppress harmful speech. 13 

Lawmakers responded to the Supreme Court's decision In Rato v. ACLU by enacting 
the Child Online Protection Act (COPA)— a second attempt at speaker-based content 
regulation. In COPA, the U.S. Congress directed Its regulation at commercial distribu- 
tors of materials "harmful to minors."'* The slightly narrower focus of COPA did not 
solve the constitutional problems that doomed the CDA. The district court enlolned 
COPA on First Amendment grounds.' 4 After a few trips to the Supreme Court and 
back for fact-finding, the district court issued Its ruling In March 2007, finding COPA 
void for vagueness and not narrowly tailored to the government's Interest In protect- 
ing minors. Once again, the court held that criminal liability for speakers and service 
providers was not the "least restrictive means" to accomplish the government's pur- 
pose because the private use of filtering technologies could more effectively keep harm- 
ful materials from children. The Thud U.S. CUcult Court of Appeals later affirmed this 
decision, and. In January 2009, the Supreme Court put the legislation to rest — at least 
for now — by refusing to hear the case. 

Plaintiffs successfully argued that CDA and COPA would chill the provision and 
transmission of lawful Internet content In the United States. Faced with the Impossible 
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task of accurately Identifying "Indecent" material and preemptively blocking Its diffu- 
sion, ISPs would have been prompted to filter arbitrarily and extensively In order to 
avoid the threat of criminal liability, while writers and publishers would feel compelled 
to self-censor. 

Stymied at restricting the publication of explicit material, congressional leaders 
changed their focus to regulating what someone might hear, rather than what they 
say. The Children's Internet Protection Act (C1PA) of 2000 forced public schools and 
libraries to use Internet filtering technology as a condition of receiving federal E-Kate 
funding. A school or library seeking to receive or retain federal funds for Internet access 
must certify to the FCC that It has installed or will Install technology that filters or 
blocks material deemed to be obscene, child pornography, or material "harmful to 
minors.” «» The Supreme Court re)ected First Amendment challenges to CIPA. holding 
that speakers had no right of access to libraries and that patrons could request unblock- 
ing. 1 ' In response, some llbranes and schools have ie)eeted E-Rate fundlng.‘“ but most 
have felt financially compelled to Install the filters. 

In the aftermath of CDA, COPA, and CIPA, Internet filtering in the United States is 
carried out largely by private manufacturers. These companies compete for market 
share In a lucrative business area. Schools, businesses, parents, and other parties wish- 
ing to block access to certain content have a broad range of software packages available 
to them. 1 ’* While some programs filter heavily, permitting access only to a "white list" 
of pteapproved sites (for example, those appropriate for young children), others gener- 
ate blacklists of blocked sites through a combination of automated screenings of the 
Web, staff members who "rate" sites on appropriateness, and user complaints. 

Although CIPA mandates the presence of filtering technology In schools and libraries 
receiving subsidized Internet access. It effectively delegates blocking discretion to the 
developers and operators of that technology. The criteria "obscene," "child pornogra- 
phy," and "harmful to minors" are defined by CIPA and other existing legislation, but 
strict adherence to these rather vague legal definitions Is beyond the capacity of filters 
and inherently subject to the normative and technological choices made dunng the 
software design process. Moreover, while CIPA permits the disabling of filters for adults 
and, In some Instances, minors "for bona fide research or other lawful purposes,"* 0 
It entrusts school and library administrators with deactivating the filters, giving them 
considerable power over access to online content. Once FCC certification requirements 
have been met. It Is these Individuals who shoulder the burden of ensuring access to 
constitutionally’ protected material. 21 

Attempts to filter Internet content In the United Sutes have also reached the state 
level. In 2004, Pennsylvania authorized the state attorney general’s office to force 
ISPs to block Pennsylvania residents' access to sites that the attorney general's office 
Identified as child pornography. 22 A district court struck down this regulation as 
unconstitutional where this state law in effect was regulating activity occurring 
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wholly outside the state's borders, but did not strike down the act due to over- 
breadth. 2 - 1 The court noted that "there Is an abundance of evidence that Implementa- 
tion of the Act has resulted In massive suppression of speech protected by the First 
Amendment." 24 

The complexities of government-led efforts to restrict online speech have given rise 
to quasi-voluntary initiatives supported by the force of law. Since possession and distri- 
bution of child pornography are criminal acts In the United States, service providers re- 
spond to removal requests and report any requests to the National Center for Missing 
and Exploited Children. In June 2008, the New York state attorney general signed 
an agreement with Comcast, AT&T, Inc., AOL, Verizon Communications, Inc, Time 
Warner Cable, and Sprint to purge their servers of child pornography Identified by 
the National Center for Missing and Exploited Children. 24 The agreement attempts 
to curtail access to child pornography by Implementing a new system to rapidly 
Identify child pornography images as well as responding to user complaints about 
child pornography. In addition, several ISPs agreed to stop supporting access to 
Usenet newsgroups, Identified by the attorney general's office as a source of child 
pornography. 

The desire to protect children from harm online continues to drive efforts at content- 
based restrictions on the Internet. Law enforcement agencies use pressure to convince 
private companies to take on voluntary Internet regulatory Initiatives. Concerns over 
child safety online have focused attention on the potential risks associated with time 
spent on social network sites such as Facebook and MySpace, where children may 
come Into contact with sexual predators and be subject to cyberbullylng by their peers. 
Law enforcement officials In the United States have been vocal in promoting age and 
Identity verification systems In order to better police online sites frequented by 
minors. 26 The Internet Safety Technical Task Force, a group of technology companies, 
Internet businesses, nongovernmental organizations, and academics, was brought 
together by agreement with 49 U.S. state attorneys general to study the use of technol- 
ogies by Industry and end users to promote Internet safety for minors. The task force 
report of January 2009 recommended a model of collaboration among industry groups, 
law enforcement, and others rather than implementation of a series of mandatory 
technical controls to protect children online. 

Another U.S. legislative attempt to control online speech, the Megan Meier Cyber- 
bullylng Prevention Act, would criminalize "severe, repeated and hostile'' speech on- 
line. 27 This proposed legislation, named after a girl who committed suicide thought to 
be induced by online harassment, has been harshly criticized as unnecessary, given the 
existing off-line remedies for harassment, and for Its potential impact on protected on- 
line speech, as It could be applied to many incidents of online speech far beyond the 
cyberbullylng targeted by the legislation. 2 * Seventeen of the SO states have passed laws 
against cyberbullylng. 29 
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While legislator in the United States have pursued broader definitions of offenses 
and mandates on Internet filtenng, Canada has tended to act conservatively in re- 
sponse to online obscenity. In Its response to online sexually explicit material, Canada 
has made only de minimis amendments to preexisting law. 30 Legislator have simply 
revised existing obscenity provisions to encompass online offenses. For example, the 
passage of the Criminal Law Amendment Act of 2001 established online acts of distrib- 
uting and accessing child pornography and luring a child as crimes. 31 The Criminal 
Code mandates a system for judicial review of material (Including online material) 
alleged to be child pornography. It does not, however, require ISPs to |udge the legality 
of content posted on their servers or to take corrective action pdor to a judicial deter- 
mination. 32 If a judge determines that the material In question Is Illegal, ISPs may 
be required to take It down and help the court Identify and locate the person who 
posted It. 33 

There have been Instances In Canada of ISPs attempting to filter content hosted out- 
side of Canada despite regulatory uncertainty In the area. For three days In July 200S, 
the Canadian ISP Telus blocked access to a Web site run by members of the Telecom- 
munication Workers Union during a labor dispute containing what Telus argued was 
proprietary information and photographs that threatened the security and privacy of 
Its employees. 34 This unilateral action by Telus deviated from the general practice 
of Canadian ISPs to pass on any and all Information without regard for content In 
exchange for immunity from liability over content. 34 This action also conflicted with 
Section 36 of the Canadian Telecommunications Act. which states that, without the 
approval of the Canadian Radio-Television and Telecommunications Commission 
(CRTQ, a "Canadian carrier shall not control the content or Influence the meaning or 
purpose of telecommunications carried by It for the public." 3 * Telus's blocking also 
affected the customers of other ISPs that connect via Telus. 37 The matter was resolved 
when Telus was able to obtain court orders from Alberta and British Columbia requir- 
ing the Web site operator, who lives and works In Canada, to remove the offending 
materials (the site was hosted In the United States). 38 

In August 2006, Canadian human rights lawyer Richard War man filed an application 
with the CRTC to authorize Canadian ISPs to block access to two hate speech sites 
hosted outside of Canada. 3 '' The CRTC denied the application, but the decision recog- 
nized that although the CRTC cannot require Canadian ISPs to block content. It could 
authorize them to do so. However, the CRTC noted that the "scope of this power has 
yet to be explored." 40 In a 2009 decision by an Ontario court. Richard Warman was 
successful at getting an order for a Web site to disclose the Identities of eight of Its 
anonymous contributors. 41 The decision has been appealed by the defendants. 42 The 
rules that the court relied on were general duty of disclosure rules in Ontario civil pro- 
cedure that were not written with the Intent of applying to this situation. The state of 
court involvement In online speech therefore remains uncertain. 
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In November 2006, Canada’s largest ISPs launched Project Cleanfeed Canada in part- 
nership with Cybertlp.ca, the nation's child sexual exploitation Upline. The pro|ect, 
modeled alter a slmUar lnltlaUve In the United Kingdom, is Intended to protect ISP cus- 
tomers "from Inadvertently visiting foreign Web sites that contain Images of children 
being sexually abused and that are beyond the jurisdiction of Canadian legal author- 
ities." 43 Acting on complaints from Canadians about images found online, Cybertlp.ca 
analysts assess the reported InformaUon and forward potentially Illegal material to the 
appropriate foreign jurisdiction. If a URL Is approved for blocking by two analysts. It 
may be added to the Cleanfeed dlstrlbudon list. Each of the participating ISPs volunta- 
rily blocks this list without knowledge of the sites It contains, precluding ISP Involve- 
ment In the evaluation of URLs. Blocked sites faU to load, but attempts to access them 
are not monitored and users are not tracked. 44 

Since Project Cleanfeed Canada Is a voluntary program, the blocking mechanism Is 
up to the dlsaedon of the ISPs. Sasktel, Bell Canada, and Telus all claim to block only- 
specific URLs, not IP addresses. In an attempt to avoid overblocking. 43 Beside the sig- 
nificant public outcry that would most likely occur, overblocking Itself may be Illegal 
under the Telecommunications Act mentioned previously. 

Under Section 163 of the Canadian Cnmlnal Code, accessing chUd pornography — as 
well as making It accessible — Is unlawful. 46 Therefore, the filtering of such content 
does not Infringe on fights of access or speech afforded by the Canadian Charter of 
Rights and Freedoms within Canada's constitution. Moreover, because ISP partlclpa- 
don In Project Cleanfeed Is voluntary, the blocking of sites through the project cannot 
be said to be state sponsored. However, the pro|ect remains controversial for other rea- 
sons. First, Project Cleanfeed has not yet sought or received authorization from the 
CRTC. Second, the blacklist maintained by Cyberdp.ca remains secret, as publishing a 
"directory" of child pornography would Itself be Illegal. This lack of transparency inevi- 
tably generates distrust of the list and the process by which It is compiled. Third, the 
procedure for appealing the blocking of a site may have implications for anonymity. 4 ’ 
A content owner or ISP customer may complain to the ISP or directly to Cybertlp.ca, 
which will reassess the site and, If necessary, obtain an Independent and binding judg- 
ment from the Nadonal Child Exploltadon Coordination Centre. It Is unclear whether 
this process might expose the complainant's Identity and create a potential for abuse 
of that Individual's fights by the ISP or perhaps even by authorities. 

Canada's response to online obscenity and Its voluntary filtering Initiative are mini- 
mal In contrast to the more vigorous regulatory efforts of the United States. 

Regulation of Online Gambling 


In 2006, the United States House of Representatives passed legislation designed to limit 
online gambling by prohibiting the transfer of funds to gambling sites. The Unlawful 
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Internet Gambling and Enforcement Act (UIGEA), which was slipped Into the SAFE 
Port Act, 48 banned gambling, prohibited online poker sites and other betting compa- 
nies from "knowingly accepting" money from United States-based customers, and 
encouraged financial Institutions to deny Internet gambling transactions. Since the 
act's Inception, Its legality has been In question.* 9 

Two states in the United States have attempted to further limit gambling online. In 
October 2008, a circuit court |udge In the state of Kentucky granted a request by the 
governor to have 141 Web sites used by online gaming operations transferred to state 
control. 40 In January 2009, following a petition filed by members of the Center for 
Democracy and Technology, the Electronic Frontier Foundation, and the Amencan 
Civil Liberties Union of Kentucky, 41 a Kentucky appeals court overturned the judge’s 
request. 42 In May 2009, John Willems, director of the Alcohol and Gambling Enforce- 
ment Division (AGED) of Minnesota's Department of Public Safety (DPS), filed an order 
requiring that 11 ISPs, Including Comcast. Charter, and Verizon Wireless, prevent state 
residents from reaching approximately 200 gambling sites. 51 1MEGA (Interactive 
Media, Entertainment, and Gaming Association) had filed a lawsuit against Willems 
seeking an injunction to block implementation of the AGED order, 44 which was later 
dropped when the Minnesota DPS reached a settlement with 1MEGA ISPs are no 
longer required to block state residents’ access to gambling sites. 54 

In 2008, Representative Barney Frank (Democrat, Massachusetts) again announced 
plans to Introduce legislation aimed at overturning the UIGEA. 56 He had failed a preci- 
ous attempt in 2007 In the form of an act entitled the Internet Gambling Regulation 
and Enforcement Act. 57 

The legality of online gambling In Canada Is unclear, as few gaming cases exist to 
provide guidelines, although persons running online gaming operations can be subject 
to criminal liability. 58 As a result, offshore gambling sites are currently legal to use In 
Canada. 59 Advertising of such services is generally held to be Illegal In Canada. 

Defamation 

As in other countries, the potential for legal liability for civil violations. Including def- 
amation and copyright, constrains the publishers of Internet content and certain ser- 
vice prociders In the United States and Canada. These pressures can have a "chilling 
effect" on lawful online content and conduct, and can threaten the anonymity of 
users. The content and court adjudication of such laws constitute state action, even 
when the lawsuits and threats are brought by private Individuals or entitles. 

One crucial factor In determining liability for defamation Is the provider's relation to 
the content — whether the provider functioned as a carrier, distributor, or publisher of 
the defamatory content. In the United States the common law has been overridden by 
a federal statute, a holdover portion of the CDA, 47 U.S.C. 230. A key part of the CDA 
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survived |udlclal scrutiny. Section 230 immunizes ISPs lot many of their users’ actions 
Including defamation (copyright and criminal activity Is excluded): "No provider or 
user of an interactive computer service shall be treated as the publisher or speaker 
of any Information provided by another Information content provider.' 1 * 0 Moreover, 
the First Amendment shields speakers from liability for much speech about public 
figures.* 1 

Canada has no statutory equivalent to the statutory protection for ISPs under CDA 
230. However, Canadian case law suggests that ISPs are entitled to a certain degree of 
immunity: In June 2004, the Supreme Court of Canada unanimously held that ISPs 
cannot be held liable for violations of Canadian copyright law committed by their sub- 
scribers." The decision ruled that the act of caching content by an ISP would not make 
It liable and that an ISP's knowledge of potential Infringements by subscribers Is not 
necessarily sufficient to create liability either." In Canada. ISPs are therefore able to es- 
cape liability If they prove that they are merely acting as "conduits."** They may. how- 
ever, face liability as publishers If they exercise editorial control over material. This 
situation stands in contrast to the United States, where CDA 230 provides publisher 
Immunity to ISPs, limited only where the provider or host has acted as an "Informa- 
tion content provider" and actually created some or all of the content.* 5 An Important 
caveat to the U.S. Immunity is that It does not apply to Intellectual property law — 
while the Canadian situation exemplified In the case described earlier does provide Im- 
munity to ISPs regarding intellectual property matters such as copynght.** Overall, 
both Canadian and U.S. service providers receive legal protections that favor the pro- 
tection of free speech online. Canadian ISPs, however, lack the clearly set out statutory 
protection that exists in the United States and may feel compelled to take down alleg- 
edly defamatory content (e.g., postings to message boards) when threatened with the 
possibility of costly lawsuits. 

Copyright 

U.S. copyright law has evolved more quickly than Canadian law both in addressing the 
Issue of ISP liability and In encouraging removal of Infringing material. The Online 
Copyright Limitations of Liability Act, a part of the Digital Millennium Copyright Act 
(DMCA) of 1998*7 gives service providers a "safe harbor" from liability for their users' 
copyright Infringement provided they implement copyright policies and provides the 
legal basis for a notice- and-takedown regime. Where a service provider unknowingly 
transmits, caches, retains, or furnishes a link to Infringing material by means of an au- 
tomatic technical process, it Is protected from liability so long as It promptly removes 
or blocks access to the material upon notice of a claimed Infringement.®* Section S12 
(c) of the DMCA* 9 provides that "a service provider shall not be liable for monetary re- 
lief, .... for injunctive or other equitable relief, for Infringement of copyright by reason 



United States and Canada Overview 


J78 


of the storage at the direction of a user of material that resides on a system or network 
. . . If the service provider 

• does not have actual knosvledge that the material or an activity using the material on 
the system or network Is infringing; 

• in the absence of such actual knowledge, Is not aware of facts or circumstances from 
which Infringing activity is apparent; or 

• upon obtaining such knowledge or awareness, acts expeditiously to remove, or dis- 
able access to, the material; 

• does not receive a financial benefit directly attributable to the Infringing activity. In a 
case in which the service provider has the right and ability to control such activity; and 

• upon notification, . . . responds expeditiously to remove, or disable access to, the ma- 
terial that is claimed to be Infringing or to be the sub|ect of infringing activity." 

The notlce-and-takedown provisions of the DMCA have been put to broad use and 
have proven to be an efleetlve Instrument for combating copyright Infringement on- 
line. This has also been seen as giving copyright owners — potentially anyone who has 
fixed an "original work of authorship" — unwarranted leverage over service providers 
and their subscribers. When a provider Is notified of an alleged Infringement, risk aver- 
sion encourages It to remove or disable access to the specified material, probably with- 
out first Informing the subscriber. The subscriber may file a counternotice and have the 
content restored If the copyright owner does not file a claim in court, but such chal- 
lenges are rare. 70 Subscribers, like the providers hosting their Web sites, are more likely 
to concede to takedown pressures, even when an Infringement may not actually be 
occurring. If a subscriber Is sued, his or her Identity may be subpoenaed, as In cases of 
defamation, and with similarly little judicial scrutiny. 71 Major search engines such as 
Google comply with hundreds of removal requests a month, even though It Is not 
even clear that provision of a hyperlink would Incur copyright liability. 72 

When Canada began to consider amending Its copyright laws. It appeared to be fol- 
lowing In the footsteps of the United States. In 2004, the House of Commons Standing 
Committee on Canadian Heritage retabled Its Interim Report on Copyright Reform, 
which proposed a "notice and takedown" policy similar to that of the DMCA, under 
which Canadian service providers would be compelled to remove content Immediately 
ujxin receiving notice of an alleged Infringement from a professed copyright holder. 
The report came under fire from the Canadian Internet Policy and Public Interest 
Clink: (CIPP1C), Digital Copyright Canada, and the Public Interest Advocacy Centre 
(PIAQ; numerous petitions and critiques followed, calling for balance between the 
nghts of content creators and fair public use. 73 The "Canadian DMCA" has since been 
proposed, In the form of Bill C-61 in 2008, which ap|>ears to be even more restrictive 
that the U.S. DMCA. 74 The consensus on this bill Is that It Is unlikely to pass, although 
It continues to be a priority of the Conservative government. 75 
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With no legislation yet enacted, Canadian ISPs have implemented a "notice and 
notice" policy for handling copyright lnfnngement. This policy would be continued 
under Bill C-61. 76 "Notice and nodee” was a concept originally proposed In the now- 
defunct Bill C-60, which was dropped from the legislative agenda In 2005 with the 
collapse of the Liberal government. 77 Under this policy, copyright owners send notices 
to ISPs regarding possible copyright Infringement by subsenbers. Providers then for- 
ward these notices to their subsenbers — Instead of being obligated themselves to re- 
move the content. 78 Even though the notices do not mean that Immediate legal 
action will follow if infringing activities do not cease, they have been successful in get- 
ting significant portions of Infringing subscribers to remove their materials. 7 '' 

Legal protections against defamation and copyright Infringement afforded under 
U.S. and Canadian law are in tension with the rights of service providers and Internet 
users. This often gives rise to the censoring and self-censoring of material. Canadian 
service providers erring on the side of caution may remove content from subscribers' 
sites, as U.S. providers do when Informed of alleged copyright violations. User material 
Is therefore subject to censorship based on unsubstantiated claims. Moreover, because 
subpoenas offer plaintiffs an avenue for ascertaining subscribers' Identities without 
scrutiny, the potential for misuse of these subpoenas can instill a fear of Improper 
discovery in subscribers that leads to self-censorship. These chilling effects have been 
well documented, 80 and while they are indirect rather than direct state-mandated fil- 
tering, they constitute real censorship of online speech. 81 

Computer Security 

Security concerns drive many of the state-mandated limitations on the speech and pri- 
vacy interests of citizens. These security concerns In the United States and Canada take 
two forms: national security and computer security. 

Computer security has led to certain content restrictions in the United States and 
Canada. Concerns about unwanted messages reaching computers. In various flavors of 
spam, have prompted content-based restrictions such as the CAN-SPAM Act of 2003 in 
the United States. In Canada, a National Task Force on Spam was convened In 200S to 
study the spam problem. 8 ' While some laws, such as the Personal Information Protec- 
tion and Electronic Documents Act, were found to at least tangentially apply to spam, 
the task force found a need for legislation directly limiting spam that originates In Can- 
ada 8 * The "And-Spam Bill" was finally tabled by the Canadian Government on April 
24, 2009, as the Electronic Commerce Protection Act (BUI C-27) and Is headed for com- 
mlttee review. 8 * Government materials accompanying the release of Canada's ECPA 
point to plans to establish a Spam Reporting Centre similar to the U.S. FTC reporting 
mechanism. 84 The U.S. Congress has considered a range of options for limiting the free 
flow of bits across the Internet to address the problem of malicious software Infecting 
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computers, though most of the efforts to filter Information based upon content 
deemed to be computing security risks are carried out by private firms or Individuals 
on a voluntary basis. 46 Calls are also being made to promote greater responsibility 
among ISPs for malicious software spread over their networks In order to contain the 
worst of "zombie" computers sending spam and distributing malware. In the Interest 
of preserving network safety for other connected PCs. In sum, there is still an active, 
ongoing discussion about how and why regulation of the flow of obviously malicious 
code over the Internet might take place. 47 

Network Neutrality 

As a new Federal Communications Commission begins Its work In the Obama Admin- 
istration, network neutrality and the problem of bandwidth throttling are near the top 
of the list of Issues it must tackle. One common mode of filtering Internet traffic is for 
ISPs to discriminate based upon the type or amount of data sent or requested through 
the network. Many people have had the experience of seeking to send an e-mail to a 
colleague with a large attachment, such as a photo or a video, only to have the e-mail 
bounce back with a note stating that an e-mail server along the way had rejected the 
message because of Its size. Writ large, this same Issue arises for ISPs and their users. 
Providers practice various forms of network management, where they decide to favor 
some data packets over others, often to combat network scourges like spam and mal- 
ware. Some ISPs, for Instance, allow users only a certain amount of bandwidth for 
certain activities. In August 2008, the FCC ruled that Comcast, a large ISP, had vio- 
lated federal network neutrality rules when It practiced bandwidth throttling to pre- 
vent usage of the BitTorrent service.* 14 The Comcast decision— a vote of 3-2 by the 
commission — marked the first such Intervention by the FCC, but by no means 
resolved the Issue of what kind of reasonable network management ISPs are permitted 
to practice. The new Obama administration FCC will likely be called upon to consider 
new legislation by Congress, new regulatory systems, and new allegations of Infrac- 
tions of the sort carried out by Comcast. 

Surveillance 

Concerns related to national security In the United States have contributed to the 
development of an extensive and technologically sophisticated online surveillance 
system. The U.S. surveillance system was expanded significantly under the Bush 
administration following the attacks of September 11, 2001. Government wiretaps 
are reported to have Included taps on major Internet Interconnect points and data 
mining of Internet communications. 89 Tapping these interconnect points would give 
the government the ability' to Intercept every overseas communication and many 
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domestic ones. The U.S. government has moved to dismiss lawsuits filed against 
It and against AT&T by asserting the state secrets privilege; district courts in California 
and Michigan have refused to dismiss the lawsuits. If the allegations prove to be true, 
they show that the United States maintains the world's most sophisticated Internet 
surveillance regime. The Bush administration also pushed to expand the Communi- 
cations Assistance to Law Enforcement Act (CALEA) to force providers to give law 
enforcement wiretap access to electronic communications networks. The attorney 
general under the Bush administration, Alberto Gonzales, called for data retention 
laws to force ISPs to keep and potentially produce data that could link Internet 
subscribers to their otherwise anonymous communications.* 0 During Barack 
Obama's election campaign, he criticized both the Bush administration's use of 
warrantless surveillance and Its reliance on the state secrets privilege, yet In January 
2009 defended congressional legislation Immunizing telecommunications companies 
from lawsuits regarding their participation in the Bush administration's surveillance 
programs.'' 1 

The U.S. government Is required to produce annual reports on the number of wire- 
taps It conducts under Title 111 of the Omnibus Safe Streets and Crime Control Act of 
1968 (the “Wiretap Act"), as well as communication Interceptions conducted under 
the Foreign Intelligence Surveillance Act (FISA) and the Pen Register and Trap and 
Trace statute ( Pen/Trap statute).* 2 No reports have been provided under the Pen/Trap 
statute since 1998.** 

In Canada, Part VI of the Criminal Code governs the powers of law enforcement to 
engage in electronic surveillance of private communications when conducting crimi- 
nal Investigations. The Criminal Code requires the production of annual reports on 
the details of the Interceptions that occur.* 4 Canadian electronic surveillance for for- 
eign Intelligence Is prlmartly undertaken by the National Defense's secretive Commu- 
nications Security Establishment (CSE), which operates In dose cooperation with Its 
U.S. counterpart and other allied Intelligence networks. A commissioner Is appointed 
to review the actions of the CSE and produce annual reports commenting on the ad- 
herence of the agency to Its legislative mandate in the National Defense Act.** The 
commissioner’s annual reports, while providing some oversight, provide little addi- 
tional transparency, as no statistics on the number of communications interceptions 
are reported. 

Conclusion 

While there Is little technical filtering In either country, the Internet Is sub|ect to sub- 
stantial state regulation in the United States and Canada. With respect to surveillance, 
the United States Is believed to be among the most aggressive countries In the world in 
terms of listening to online conversations. 
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Legislators in both countries have imposed Internet-specific regulation that limits 
their citizens' access to Internet content. In addition, lawmakers have empowered pri- 
vate entitles to press Internet intermediaries, Including lSPs f for content removal or to 
carry out filtering. Although the laws are subject to legislative and Judicial debate, these 
private actions may be less transparent. Governments in both countries, however, have 
experienced significant resistance to their content restriction policies, and, as a result, 
the extreme measures carried out in some of the more repressive countries of the world 
have not taken hold in North America. 
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Australia maintains some of the most restrictive Internet policies of any Western coun- 
try and over the past two years has taken steps toward a nationwide mandatory Inter- 
net filtering scheme. Its neighbor, New Zealand, regulates the Internet considerably 
less rigorously. Australia's constitution does not explicitly give the right to free 
speech, 1 and In fact contains a clause giving the Australian government "communi- 
cations power," allowing It to regulate "postal, telegraphic, telephonic, and other 
like services," including the Internet. 2 A number of state and territorial governments 
In Australia have passed legislation making the distribution of offensive material a 
criminal offense, as the constitution does not afford that power to the national 
government. 3 

The Australian government has for some time promoted and financed an "opt-ln" 
filtering program, in which users voluntarily accept filtering software that blocks offen- 
sive content hosted outside the country. In 2008, the government announced plans 
for a layered filtering scheme, proposing a mandatory filter to block pornographic and 
Illegal content, as well as an opt-out filter that would block even more content. The 
filter, which faces considerable opposition from Australian and International anti- 
censorship groups and, in some cases, the ISPs themselves, will first be tested by six 
ISPs before going live. 4 
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In contrast. New Zealand has less strict Internet regulations. The government main- 
tains a more limited definition of offensive content that can be Investigated by a desig- 
nated government entity, although — unlike In Australia — the definition includes hate 
speech (despite Its being Illegal In both countries). Furthermore, the government of 
New Zealand has not passed legislation to allow issuance of takedown notices for such 
content, and Its enforcement of Internet content regulation by prosecution almost 
solely focuses on child pornography. New Zealand has not yet formalized Its copyright 
laws and has reacted multiple proposals to do so, most recently scrapping proposed 
Section 92A of the Copyright Amendment (New Technologies) Act* The country's def- 
amation and surveillance laws are similar to those of Australia. Overall, Australian 
Internet regulations are significantly stricter than those of New Zealand and much of 
the Western world. 

Offensive Content 

Australia's and New Zealand's approaches to offensive content on the Internet both 
rely on government-run content-classification systems. However, their approaches 
differ In terms of what Is considered offensive and what Is done about the offending 
content 

Australian laws relating to the censorship of offensive content are based on the 
powers delineated In and protections omitted from the Australian constitution. Section 
Sl(v) of the document gives Parliament power to "make laws for the peace, order, and 
good government of the Commonwealth with respect to: (v) postal, telegraphic, tele- 
phonic, and other bke services.’’ 4 With no explicit protection of free speech In the 
constitution, the Australian government has invoked Its "communications power" to 
Institute a restrictive regime of Internet content regulation. 

The Broadcasting Services Amendment (Online Services) BUI 1999. an amendment to 
the Broadcasting Services Act 1992, establishes the authority of the Australian Commu- 
nications and Media Authority (ACMA)' to regulate Internet content. The ACMA Is 
empowered to look Into complaints from Australians about offensive content on the 
Internet and Issue takedown notices. The ACMA Is not mandated to scour the Internet 
for potentially prohibited content, but It Is allowed to begin Investigations without an 
outside complaint. 8 

Web content that Is hosted In Australia may be subject to a takedown request from 
the ACMA If the Office of Film and Literature Classification finds that It falls within 
certain categories as defined by the Commonwealth Classification (Publications, Films 
and Computer Games) Act 199S, a cooperative classification system agreed to by the 
national, state, and territorial governments. 
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The levels and definitions of prohibited content are as follows: 

1. R18: Contains material that Is likely to be disturbing to those under 18. This content 
Is not prohibited on domestic hosting sites if there Is an age-venficadon system certi- 
fied by the ACMA in place. 

2. X18: Contains nonviolent sexually explicit content between consenting adults. This 
content may be sub|ect to ACMA takedown provisions If hosted on domestic servers. 

3. RC: Contains content that Is Refused Classification (child pornography, fetish, 
detailed lnstrucdon on crime, etc.) and Is prohibited on Australian-hosted Web sites * 

The classlficadon system chosen for Internet content Is the more restrlcdve standard 
used for films, rather than the publlcadons classification. As a result, some content 
allowable offline Is banned when brought online. 10 

Once the determination has been made that content hosted within Australia Is pro- 
hibited, the ACMA Issues a takedown notice to the Internet content provider (ICP). It 
Is not illegal for the ICP to host prohibited content, but legal acdon could be taken 
against It by the government If It does not comply with the takedown notice. 

For offensive content hosted outside of Australia, the ACMA Itself determines 
whether content is prohibited and notifies a list of certified Web-filter manufacturers 
to include the prohibited Web sites In their filters." To obtain certification, these certi- 
fied "Family Friendly Filters’’ must agree to keep lists of prohibited sites confidential." 
Providers are then required to ofler a Family Friendly Filter to all their customers, 
though customers are not required to accept them. 11 As a result, content taken down 
In Australia could be posted outside the country and still be accessible to the majority 
of Australian Internet users. Electronic Frontiers Australia, a nonprofit group dedicated 
to protecting online freedoms, reports that at least one Web site taken down has 
moved to the United States, even keeping Its URL under the "au" domain. It Is not 
known how many Web sites have moved overseas in this fashion. u 

States and territories in Australia have Instituted a variety of laws that criminalize the 
downloading of Illegal content and the distribution of content that is "objectionable’' 
or "unsuitable for minors."" The state of Victoria, for example. In Section 57 of its 
Classification (Publication, Films and Computer Games) (Enforcement) Act 1995, 
makes It Illegal to "use an on-line Information service to publish or transmit, or make 
available for transmission, objectionable material.’' 1 ® There Is no uniformity between 
the states, however. In Western Australia, for example. It Is not Illegal to distribute 
R18 and X18 to adults online (though the ACMA can still Issue takedown notices), 
but the possession of any RC content (not |ust child pornography, as Is the case in 
other states) Is Illegal. 17 

In March 2007, all mainland states In Australia banned access to YouTube over 
school networks because of an uploaded video depicting a 17-year-old Australian girl 
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being abused, beaten, and humiliated by a group of young people. Eight youths have 
been chaiged in connection with the assault. 18 School blocking of YouTube has faced 
opposition, notably from Google executive Vint Cerf, who noted his belief that "many 
young people have those skills that may be well beyond those of their parents and 
their teachers and will find ways of accessing Information." 1 * 

The Commonwealth Is also Implementing new Internet filtering Initiatives. In June 
2006, the Australian government announced an AUD 116.6 million Initiative, "Pro- 
tecting Australian Families Online." The Initiative Included AUD 93.3 million to be 
spent over three years to provide all families with free Web filters. The government 
also announced that It would test an ISP-level blocking system In Tasmania. At the 
time, Helen Coonan, the minister for communications, information technology, and 
the arts, opposed Implementing this system on a countrywide basis. 20 

However, in December 2007, Telecommunications Minister Stephen Conroy 
announced a strengthened "clean feed" policy, under which all Australian ISPs are 
required to provide Internet filtering services that prevent child pornography and other 
"Inappropriate" material from reaching schools and houses. 21 Those who link to 
banned sites from their own sites will be fined AUD 1 1,000 per day. 22 Instead of opting 
in to the program, as users did under the 2006 Initiative, users who wish to see adult 
material must opt out (there Is no opt-out for Illegal content). In conjunction with 
the new policy, the ACMA released a set of updated regulations entitled the Restricted 
Access System Declaration of 2007, 2 * requiring content service providers to Implement 
age-verlficadon systems on all Web sites containing mature or adult content. 24 As of 
April 2009, ACMA was still conducting trials for ISP-level content filtering; eight ISPs 
had agreed to participate. 24 

The plan was Initially kept under waps. In October 2008, a policy advisor in Con- 
roy’s office sent an e-mail to the Internet Industry’ Association (HA) Instructing the HA 
to Inform ISPs that they must keep quiet about the country's filtering scheme. 26 The 
Incident was widely reported by the Australian press, and several heads of ISPs spoke 
out against what they considered to be an attempt at censorship. 22 

One concern of those opposed to the scheme Is the potential for nontllegal Web sites 
to be banned, a fear that has turned out not to be unfounded. In March 2009, ACMA 
added pages from the whistle-blowing site Wildleaks to Its blacklist of banned URLs 
after the site published a secret Internet censorship list for Denmark. 28 In doing so, 
Australia became one of only three countries In the world to censor the site — the other 
two are China and the United Arab Emirates. In retaliation, a group of anonymous acti- 
vists published ACMA’s confidential blacklist on Wlklleaks. 2 * 

Although New Zealand has not yet instituted a filtering scheme like that which Aus- 
tralia Is working to Implement, a vaguely worded page on the Department of Internal 
Affairs’ (DIA) special censorship page entitled "Censorship and the Internet" states that 
the department “takes a proactive role in prosecuting New Zealanders who trade 
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objectionable material via the Internet. If a publlcaUon Is categorised as 'objectionable' 
It is automatically banned by the Films, Videos, and Publications Classification Act 
1993."*° Electronic Frondeis Australia has stated that this act likely covers Internet 
materials as welL 31 Under the act, any material that "describes, depicts, expresses, or 
otherwise deals with matters such as sex, horror, crime, cruelty, or violence in such a 
manner that the availability of the publication Is likely to be ln|urlous to the public 
good” Is considered ob|ectlonable and Is Illegal to distribute or possess. 32 Specifically, 
any material that promotes or supports "the exploitation of children, or young per- 
sons, or both, for sexual purposes; or the use of violence or coercion to compel any 
person to participate In, or submit to, sexual conduct; or sexual conduct with or upon 
the body of a dead person; or the use of urine or excrement In association with degrad- 
ing or dehumanizing conduct or sexual conduct; or Bestiality; or acts of torture or the 
Infliction of extreme violence or extreme cruelty" Is banned. 33 There is also a decision 
procedure described In the act for any content that might be objectionable but does not 
fall within this specific list. Including discriminatory and hateful material. 34 This law 
has formed the basis of the DIA's enforcement of Internet censorship In the country. 

Like Australia's ACMA, the D1A "proactively" Investigates potentially banned mate- 
rial 34 and submits any such material not already classified to the Office of Film and 
Literature Classification for a ruling. 36 This office then classifies the material as "un- 
restricted" or "objectionable," except In certain circumstances of restricted access or 
for "educational, professional, scientific, literary, artistic, or technical purposes." 37 

There Is, however, no explicit legal mechanism for the takedown of objection- 
able material. Instead, the nonprofit IntemetNZ Is In the process of establishing an 
Industry-wide code of conduct that would require Its signatories to agree not to host 
Illegal content. 38 As a result, the government focuses Its efforts on prosecuting the dis- 
tributors or possessors. The Films, Videos, and Publications Classifications Amendment 
Act 2005 sets the penalty for distributing objectionable material at a maximum of ten 
years In prison (up from a maximum of one year) and for knowingly possessing objec- 
tionable materials at a maximum of five years In prison or a NZD 50,000 fine. 39 Accord- 
ing to various sources, the D1A has almost completely focused Its enforcement of 
Internet censorship on child pornography. 40 

Hate Speech 

Both Australia and New Zealand have legislation addressing hate speech generally, and 
both have applied this legislation to the Internet through different means. New Zea- 
land, however, has an Institutionalized Investigation system, while Australia does not. 

Australia addresses hate speech through the Racial Dlscrtminadon Act 1975, which 
makes It "unlawful for a person to do an act, otherwise than In private. If; the act Is 
reasonably likely. In all the circumstances, to offend. Insult, humiliate or Intimidate 
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another person or a group ol people; and the act Is done because of the race, colour or 
national or ethnic origin of the other person, or of some or all of the people In the 
group." 41 

Australian courts applied this law to the Internet for the first time in October 2002 
In the / ones v. TObm case. Jeremy Jones and the Executive Council of Australian Jewry 
brought a lawsuit against Frederick Toben, the director of the Adelaide Institute, be- 
cause of material on Toben's Web site (www.adelaldelnstltute.org) that denied the 
Holocaust. The Federal Court, ruling that publication on the Internet without pass- 
word protection Is a "public act," found that posting this material online was In direct 
slolatlon of Section 18C of the Racial Discrimination Act 197S (quoted earlier) and 
called for the material to be removed from the Internet. 42 

Australia does not, however, give the ACMA authority to Investigate complaints or 
Issue takedown notices for hateful or racist materials online, even If they would be Ille- 
gal under the Racial Discrimination Act 197S. 41 Schedule S of the Broadcast Services 
Act 1992 gives the ACMA authonty only over materials deemed "offensive" within 
the classification scheme described earlier. As a result, there appears to be no venue 
other than the courts In which to pursue complaints about hateful or racist materials 
online. However, Chilling Meets reports that Google received notice on May 5, 2006, 
of a site in Its search results that “allegedly violates section 18C of the Racial Discrimina- 
tion Act 1975" and removed it from the Google Australia site (www.google.com.au). 4 * 
This action may be Indicative of a new notice-based system taking form. 

New Zealand, in contrast, has both explicit prohibition of dlscnmlnatlon based on 
race, religion, age, disability, and sexual orientation in Section 21(1) of the Human 
Rights Act 1993 44 and explicit prohibition of the publication of material that "repre- 
sents (whether directly or by Implication) that members of any particular class of the 
public are Inherently Inferior to other members of the public by reason of any charac- 
teristic of members of that class, being a characteristic that Is a prohibited ground of 
discrimination specified In Section 21(1) of the Human Rights Act 1993" 46 In Section 
3e of the Films, Videos, and Publication Classifications Act 1993. The D1A uses these 
statutes to pursue Investigations Into potentially discriminatory material. 

Copyright 

Australia's copyright laws underwent a significant overhaul following the acceptance 
of the Australia-United States Free Trade Agreement In 2004. Pursuant to that agree- 
ment, Australia was required to bring Its copyright laws closer In Une with those of 
the United States. 4 ' Some of the relevant requirements Included the following: 

1. Agreeing to World Intellectual Property Organization (W1PO) Internet treaties. 

2. Implementing an "expeditious" takedown system of copyright-infringing materials. 
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3. Strengthening control over copyright protection technology circumvention. 

4. Agreeing to copyright protection standards. 

5. Increasing the length of copyright to life plus seventy years from Its previous level 
of life plus fifty years." 

Most of these provisions were Implemented in the U.S. Free Trade Agreement Imple- 
mentation Act 2004, though new regulations In response to requirement 3 were 
recently Implemented In the Copyrights Amendment Act 2006. 4W 

After Implementing a system of copyright more consistent with that of the United 
States, the Australian government decided to pursue another overhaul of Its copyright 
laws In 2006, as ABC Science Online reports, to "keep up with the rapidly changing dig- 
ital landscape." 40 The proposed amendments to the Copyright Act 1968 were worri- 
some to many. Google argued that certain provisions would allow copyright owners 
to pursue legal action against it and other search engines for caching material without 
obtaining express permission from each Web site. These provisions would "condemn 
the Australian public to the pre-Internet era," Google argued. 41 Other critics contended 
that the proposed amendments would make possession of an IPod or other music - 
llstentng device designed to play MP3 files Illegal, and uploading a video of oneself 
singing along to a pop song a crime. 42 

Although these two final concerns have been remedied In the resulting Copyrights 
Amendment Act 2006 (It Is still legal to own an IPod and It Is allowable to post a Up- 
synching video), 43 the caching Issue stlU appears to be unresolved. There Is an excep- 
tion In the act that allows computer networks of educational Institutions to cache 
copyright-protected online material "to facilitate efficient later access to the works and 
other subject-matter by users of the system.” 44 However, this provision does not ap- 
pear to offer the exception that Google sought. 

Overall, though, the amendments aUow for a greater number of exceptions to the 
copyright laws to establish more reaUstlc fair use of copynghted material, such as 
"time-shifting, format-shifting and space-shifting" (recording a television show to 
watch later, scanning a book to view It electronically, and transferring material from 
CDs to iPods, respectively), and greater protection of parody and satire. 44 

The AustraUan judiciary has been active In copyright enforcement online as well. In 
a landmark decision In December 2006, the Federal Court upheld a lower court ruling 
that found the Web site operator of mp3s4free.net, Stephen Cooper, and the hosting 
ISP, E-Talk. liable for copyright Infringement. Cooper's site did not Itself host any copy- 
right-protected material, but rather served as a search engine through which users 
could find and download copyright-protected music for free. In Its ruling, the court 
found that merely Unking to copyright-protected material was grounds for Infringe- 
ment. In addition, the court found that ISP E-Talk was also liable for copyright In- 
fringement because It posted advertisements on the site and was unwilling to take the 
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site down. 4 ® Interestingly, Dale Clapperlon, of Electronic Frontiers Australia, has 
argued that this decision could be used against search engines such as Google. In an 
article In the Sydney Morning Herald, he stated that “what Cooper was doing Is basically 
the exact same thing that Google does, except Google acts as a search engine for every 
type of file, while this site only acts as a search engine for MP3 files.'’ 47 

In New Zealand, recent attempts to regulate copyright law to Include digital provi- 
sions have been refected by the national government. 48 Therefore, New Zealand's cur- 
rent law Is contained within the Copyright Act 1994. The term of a copyright Is set at 
life plus fifty years. 4 * 

The Copyright (New Technologies and Performers’ Rights) Amendment BUI cur- 
rently being considered In New Zealand, however, would dramatically change the dig- 
ital copyright landscape Into one that more closely mirrors the Digital MUlennlum 
Copyright Act (DMCA) of the United Sutes. If passed, the biU would allow for format 
shifting and space shifting of music, 60 criminalize the distribution of the means to sub- 
vert technological protection measures protecting copyrighted content, and establish a 
system In which ISPs are required to remove copyright-infringing content and notify 
the poster if the ISP "obtains knowledge or becomes aware that the material Is infring- 
ing.'' 61 This removal system Is somewhat different from the U.S. system of notice and 
takedown in that It requires knowledge of Infringement and not simply notification. 6 * 

Defamation 

Through a variety of court cases, both Australia and New Zealand have applied their 
respective defamation laws to the Internet, and both countries, with New Zealand 
courts following the Australian courts’ example, have controversially expanded their 
|urlsdlctlon In defamation suits to online materials hosted outside their borders. 

Defamation In Australia, except for a smaU range of cases. Is handled through state 
and territorial law,- 61 until December 2005, states and territories maintained largely 
nonuniform codes of defamation 64 After what amounted to a threat that the Com- 
monwealth would act If states and territories did not, the states and territories finally 
decided to enact uniform laws In December 200S. 64 Since defamation laws are applied 
where material Is seen, read, or experienced, nonuniform laws meant that writers and 
publishers had to be wary of different sets of laws all over the country under which 
they might be sued under various definitions of defamation. 66 Now the laws are uni- 
form. so this liability risk has been mitigated. No legislation specifically targets defama- 
tion on the Internet, and, therefore. Its regulation Is essentially the same as that for all 
other publications. 67 

The judiciary has played an Important role In setting online defamation policy be- 
cause of jurisdictional Issues. In a major decision in December 2002, the Australian 
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High Couit ruled that a parly within Australia can sue a foreign party In Australian 
court for defamation resulting from an online article hosted on a foreign server. The 
specific case Involved a lawsuit pitting Joseph Gutnlck, an Australian businessman, 
against Dow Jones over a defamatory article written about him In Barron’s Online In 
October 2000. Dow Jones argued that since Its servers (and therefore the article) were 
In the United States, the defamation case should have been trted In the United States. 
A decision allowing the case to be ttted In Australia, they argued, would restrict free 
speech around the world because It would require authors and publishers to take Into 
account the laws of foreign counttles under which they could be sued when publishing 
material online. 68 

The court countered, however, that the "spectre of 'global liability' should not be 
exaggerated. Apart from anything else, the costs and practicalities of bnnglng proceed- 
ings against a foreign publisher will usually be a sufficient Impediment to discourage 
even the most Intrepid of litigants. Further, in many cases of this kind, where the pub- 
lisher Is said to have no presence or assets In the jurisdiction. It may choose simply to 
ignore the proceedings. It may save Its contest to the courts of Its own jurisdiction 
until an attempt Is later made to enforce there the judgment obtained In the foreign 
trial. It may do this especially If that judgment was secured by the application of laws, 
the enforcement of which would be regarded as unconstitutional or otherwise offen- 
sive to a different legal culture." 69 The parties eventually settled for AUD 180,000 in 
damages and AUD 400,000 in legal fees." 90 

New Zealand defamation law was first found to apply to online material in a district 
court decision, O'Brien v. Brown, In late 2001. In the case. Patrick O’Brien, chief ex- 
ecutive officer of the New Zealand domain manager Domalnz, sued Alan Brown, the 
head of a Manawatu ISP, for Brown's posting of harsh criticisms and calls for fraud 
Investigation Into Domalnz on a publicly available Internet Society of New Zealand 
bulletin board.'* The judge In the case found that the Internet afforded no additional 
freedom of expression to the defendant than any other medium and. further, that pub- 
lication on the Internet required a greater award of damages than through another 
medium because of the ease with which Domain it's potential customers and clients 
could access the defamatory material . n 

In addition, the New Zealand courts have followed Australia’s example In determin- 
ing the jurisdiction for defamation suits over online content hosted in a foreign coun- 
try. Ironically, the relevant suit involved an Australian defendant. In 2004, the 
Wellington High Court found that the University of Newlands (based In New Zealand) 
could sue Nationwide News. Ltd. (based in Australia) in New Zealand court for Nation- 
wide’s Inclusion of the plaintiff In a list of "Wannabe Unis" and "degree mills" in Its 
online newspaper. The Australian. This ruling more closely aligned New Zealand defa- 
mation policy with Australia. 7 * 
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Surveillance 

Both Australia and New Zealand have taken steps toward greater Internet security, pass- 
ing laws to give government agencies greater authority to Investigate Illegal activities 
online. 

Australia's Internet surveillance regime Is primarily based on two laws. The first Is the 
Telecommunications (Interception and Access) Act 1979. This act, amended In June 
2006, prohibits Intercepting telecommunications or accessing, without first notifying 
both the sender and the receiver, stored telecommunications by any person or entity, 
except In cases such as the Installation or maintenance of telecommunications equip- 
ment.' 4 It also establishes two warrant systems, controlled by the attorney general, by 
which law enforcement may gain access to these communications: "telecommuni- 
cations service warrants" (for real-time Interception) and "stored communications 
warrants" (for access to stored communications without a requirement to notify the 
communicants).' 4 

The second relevant law Is the Surveillance Devices Act 2004, which significantly 
Increases the authority of law enforcement to install surveillance devices such as 
keystroke recorders under newly created "surveillance device warrants." 7 ®’ Electronic 
Frontiers Australia has expressed worry that these warrants will be used by law enforce- 
ment to avoid applying for a telecommunications service warrant, essentially allowing 
them to intercept communications where a telecommunications service warrant would 
not have been authorized." 

Further, in 2003, the Australian Internet Industry Association (I1A) attempted to 
establish a code of practice requiring ISP signatories to retain user Information for six 
or twelve months and provide It to law enforcement upon official request. Specifically, 
personal data — such as name, address, and a edit card details — were to be retained by 
ISPs for six months after a customer ends service with that ISP or twelve months after 
the record Is created, whichever Is longer. Operational data, such as proxy logs and 
e-mail information, were to be kept for six months after creation of the data. 78 Law 
enforcement could request this Information using the certificate system set up in the 
Telecommunications Act 1997, » which allows private Information to be disclosed If 
"an authorized officer of a criminal law-enforcement agency has certified that the dis- 
closure Is reasonably necessary for the enforcement of the cnmlnal law." 80 

In New Zealand, the most relevant piece of legislation to Internet security Is Sup- 
plemental Order Paper 85 to the Crimes Amendment BUI No. 6, passed In 2003. The 
act essentlaUy makes It Ulegal to hack or Intercept electronic communications, but 
exempts the police, the Security Intelligence Service, and the Government Communi- 
cations Security Bureau acting under interception warrants as described by the Crimes 
Act 1961. As noted on the Web site of the Green Party, however, these warrants could 
be "quite broad in their application and cover a class of people." 81 



Australia and New Zealand Overview 


401 


Conclusion 

Australian laws and policies toward the Internet are aligned with those of many 
Western countries, while New Zealand's are less stringent The Australian government 
has instituted a strict takedown regime for offensive content, and various states and 
territories have made distribution of such content a criminal offense. The government 
Is pursuing voluntary programs to Increase home filtration of the Internet, and Aus- 
tralia's evolving hate speech, copyright, defamation, and security’ policies offer further 
justification for restricting Internet content. A countrywide ISP-level filtering scheme Is 
currently being tested. 

New Zealand, In contrast, has Instituted a more limited classification system — 
though It does Include hate speech — with no takedown notices and has not yet for- 
mally adopted copyright legislation that applies to the Internet. Its broad defamation 
and security policies, however, are more reminiscent of Australia. 

Overall, however, Australia's Internet censorship regime Is strikingly severe relative 
to both Its neighbor and similar Western states, and It Is helping to push the normative 
boundaries of filtering for an Industrialized democratic state. It is not, however, at the 
level of the most repressive regimes that the OpenNet Initiative has studied. 
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The dynamism and creativity driving the development oi networked spheres In Asia 
showed no signs ol abating tluough the early months of 2009. As more citizens began 
to utilize Internet tools for disseminating and producing Information, online expres- 
sion, activism, and networking have begun to permeate the national political and cul- 
tural fabric across the spectrum of Aslan countries. 

In 2007-2008, the OpenNet Initiative conducted ln-country testing in Bangladesh, 
China. India, Indonesia. Laos. South Korea, Malaysia, Burma. Nepal, Pakistan, the Phil- 
ippines, Singapore. Vietnam, and Thailand. Testing results found tillering practices to 
be largely consistent with 2006 results. 

China, Burma, and Vietnam continued to rely on pervasive filtenng practices to 
shape public knowledge and expression by targeting primarily content specific to polit- 
ically sensitive topics In their own countries, especially Web sites In local languages. 
China. Burma, and Vietnam also continued to block with tire greatest breadth and 
depth, spanning human rights Issues, reform and opposition activities, independent 
media and news, and discrimination against ethnic and religious minorities. On the 
opposite end of the spectrum. Singapore continued to block a nominal amount of 
adult content and pornographic Web sites. 
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South Koiea Increased Its filtering across content categories to Include a selective 
number of the Korean-language pornography Web sites, but otherwise remained con- 
sistent with Its 2006 filtering practices, specifically targeting Web sites containing 
North Korean propaganda or promoting the reunification of North and South Korea, 
as well as a handful of gambling Web sites. In contrast to 2006, ONI In 2007-2008 
found no evidence of filtering of pornography and religious conversion sites in Paki- 
stan. Otherwise, Pakistan continued to engage In security and conflict filtering as well 
as social filtering of Web sites containing ‘'blasphemous" content. 

The ONI found no evidence of national filtering In Indonesia, Laos, Nepal, or the 
Philippines. During ONI testing periods, Bangladesh, Indonesia, and Malaysia were 
not filtering the Internet, but media reported that these countries also began blocking 
selectively for brief periods In 2007-2008. 

Internet In Asia 

Asia continues to be home to some of the most and least connected countries in the 
world, while a large middle tier of countries are witnessing rapid and steady growth. 
In 2008, Thailand and Vietnam each reached penetration rates of a quarter of their 
populations. 1 China trailed at 22.6 percent, 2 though In 2008 it became the country 
with the most Internet users In the world, at 298 million* China, where the number 
of Internet users Increased 42 percent from 2007, 4 also saw remarkable growth In 
broadband usage. Over 90 percent of Internet users In China had broadband access by 
the end of 2008, a spike of over 100 million. 5 In contrast, concerns about a saturated 
market were prominent In South Korea, which by early 2008 had become the most 
penetrated broadband market in the world at 90 percent of households. 6 While Malay- 
sia, with a penetration rate of 61 percent, trailed behind only Singapore In Southeast 
Asia and has strongly encouraged adoption of broadband Internet throughout the 
country, 7 broadband penetration only surpassed 17 percent In the third quarter of 
2008, from 7 percent in 2Q0S. 8 

On the opposite end of the spectrum, countries with less than a 10 percent Internet 
penetration rate Including India, Nepal, and the Philippines have been actively pro- 
moting and Investing In Infrastructure and access, particularly In rural areas that have 
been affected most profoundly by the digital divide. About 80 percent of Bangladesh’s 
fixed-line connections are Installed In or around Its four largest cities, yet about 80 per- 
cent of all Bangladeshis live outside these dtles.’ In Nepal, with an Internet penetra- 
tion rate of only 1.4 percent. 10 the Nepal Wireless Project wirelessly connected 22 
remote mountain villages to the Internet In five years, allowing villagers to exchange 
Information about commodity prices, local goods, and markets, and implemented tele- 
medicine facilities. 1 1 
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The exception to the general embrace of Information and communication technol- 
ogy (ICT) development has consistently been Burma. The country's largest 1CT devel- 
opment at Yadanabon City, supported by foreign Investment and set to serve as the 
national backbone connecting to China, India, and Thailand, Is currently under con- 
struction near Mandalay. u However, the military government under the State Peace 
and Development Council (SPDC) was responsible for one of the most severe crack- 
downs on the Internet documented. On September 29, 2007, In order to cut off the 
stream of footage and Images of Its violent response to stopping protests led by monks 
and civilians, the SPDC made use of Its comprehensive control over the country’s 
Internet gateways to completely shut down Internet access (with Intermittent periods 
of connectivity) for approximately two weeks. The government also restricts upload 
speeds to half the download speeds for Internet subscribers and frequently implements 
slowdowns In Internet access speeds, which many critics claim are attempts to restrict 
Internet usage and enhance monltonng capabilities. 14 

The increasing popularity of Interactive Web sites and social media platforms such as 
video-sharing sites, Web portals, discussion forums, and blogs has enabled them to 
have a resounding impact in Asia. By facilitating the easy production and sharing of 
user-generated content, online social media have served as important vehicles for 
news dissemination and Independent expression, especially In countries where main- 
stream media are state controlled or closely aligned with ruling Interests. For example, 
bloggers have been named the "fifth estate" In Aslan countries such as Vietnam, Thai- 
land, and China, whose governments maintain strict control over most news and 
media outlets. In Malaysia, independent news sites and blogs were credited with pro- 
viding opposition parties with a platform to mobilize during the March 2008 general 
elections, in which the ruling Bartsan Naslonal (BN) coalition had Its worst showing 
ever and five bloggers were elected to seats for opposition partles. ,s Though Internet 
penetration lags In rural areas (representing 15 percent of households with Internet 
access), 16 alternative messages and Information available only online reached beyond 
young, middle dass, and urban voters through short-message-service (SMS) messages, 
video compact discs (VCDs) of online television programming, and printed filers. 17 The 
only media organization to provide live coverage of election results, Malayslaktni.com, 
has reportedly become the country's most popular alternative news source and was 
one of about ten of the first online news sites granted media accreditation In July 
2008.'“ 

In November 2007, President Pervez Musharraf of Pakistan declared a state of emer- 
gency and shut down the country’s Independent broadcast media, Including news, 
sports, and entertainment television stations. 19 In response, these stations went online 
and offered free broadcasts on their Web sites, while YouTube became the vehicle for 
lawyers, Journalists, and activists to post footage of protests and other news. 20 
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Perhaps the most diamatlc demonstration of citizens utilizing online tools to dr- 
cumvent their governments' control over information occurred during the so-called 
Saffron Revolution In Burma. On August 19. 2007, leaders of the 88 GeneraUon stu- 
dent movement organized a rally to protest a sudden sharp increase In fuel prices In 
Rangoon, 21 and over the next month, leadership of the protests passed to Buddhist 
monks, with participation swelling to an estimated crowd of 150,000 protesters on Sep- 
tember 23.“ Throughout these extraordinary demonstrations and the first days of the 
junta’s violent crackdown on monks, students, and others, citizen video journalists 
and bloggers fed raw, graphic footage and eyewitness accounts to the outside world 
over the Internet and through trusted networks. This vital Information was posted by 
overseas Burmese news organizations and International media, and fed back Into the 
country by satellite television and radio, thus achieving a bidirectional flow of Informa- 
tion only fully cut off when the government Implemented a complete shutdown of the 
Internet beginning on September 29. 24 Despite the Burmese government's continuous 
efforts to restrict Internet access and online expression, the use of blogs and social 
media sites for the Independent gathering and dissemination of Information appears 
to have taken hold: In the aftermath of Cyclone Nargls In May 2008, which devastated 
much of the Irrawaddy river delta and left more than 138,000 dead or missing and mil- 
lions In need of food, water, shelter, and medical care, 24 citizens nevertheless set out to 
record the damage as well as the government's response. 24 

In Asia, citizens' application of the array of Internet tools available to them has often 
tested societal and cultural boundaries for acceptable behavior. In 2005, a girl In South 
Korea who allowed her dog to defecate on the subway was filmed, tracked down, pub- 
licly exposed, and ulomately quit her university In humiliation. 26 As "dog poop girl," 
she became emblematic of an online vlgllantlsm that would drive the Implementation 
of real-name registration requirements In South Korea. Known In China as "human 
flesh search engines," this phenomenon can thrive across borders. For example. In 
April 2008, as groups around the world organized actions around the crackdown on 
unrest In Tibet, a Chinese student was filmed attempting to referee between two 
opposing groups of protesters at Duke University. 27 After the video was posted on 
YouTUbe and other Web sites, the online reaction was swift: she was lambasted In 
Chlnese-language discussion forums and portals, and her parents living In China 
went into hiding after threats were painted on their apartment. 2 * 

Since 2006, many Aslan governments have quickly realized the potential benefits of 
exploiting opportunities for conducting propaganda or public relations strategies over 
the Internet, even while cracking down on Independent and critical voices thriving In 
these online spaces — an example of the evolution toward third-generation controls. 
The Chinese government has carefully orchestrated symbolic engagements with Its 
online citizens as well as mass strategies to boost public relations. On June 20, 2008, 
President Hu Jlntao participated in his first online chat on the People's Dally Online's 
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"Strong China" (t/taqgguo) discussion forum,** while the so-called Fifty Cent Piirty, in 
reference to an estimated 280.000 Web commentators nationwide who zealously sup- 
port the Chinese Communist Party and were Initially rumored to net SO cents per post, 
are directly organized by the government to "guide" online public opinion. 30 In South 
Korea, with Its credibility badly damaged by protests over the decision to end the ban 
on Imports of American beef that were largely fueled by Internet debate. President Lee 
Myung-bak's administration ordered government ministries and organizations to begin 
blogging in order to inform the public of news and events. 31 It look these steps amid 
attempts to legislate further restrictions on what It saw to be a proliferation of slanderous 
and malicious commentary online. After Malaysia’s general election In March 2008, M 
Prime Minister Abdullah Ahmad Badawl said that his Barlsan Naslonal (BN) coalition’s 
"biggest mistake" In the elections was In believing that the "cyberwar" was unimpor- 
tant. 33 Even the Burmese government, which has taken the most draconian measures to 
keep Its citizens off-line, reportedly launched Its Web portal www.khltlunge.org.mm, run 
by the government-aligned Union Solidarity’ and Development Association, to "spread 
government propaganda and counter media attacks by exiled Burmese media groups." 3 * 

Legal and Regulatory Frameworks 

In 2007-2008, the leadership of many Aslan governments facing political threats or 
crises took measures to further restrict certain forms of expression on the Internet. 
These measures, which especially targeted acts of cyber defamation and Independent 
news reporting and criticism on social media platforms such as VouTUbe, reflected the 
growing relevance and Impact of the Internet as a source of Information from Indepen- 
dent and diverse sources. 

In Thailand, ongoing political turmoil between "red-shirt" and "yellow-shirt" fac- 
tions, organized around their support of or opposition to former Prime Minister Thak- 
sin Shlnawatra and the constituencies he championed, led Thai Prime Minister Samak 
Sundaravej to declare a state of emergency on September 2, 2008. Upon his declara- 
tion, the Ministry of Information and Communications Technology ordered ISPs to 
Immediately shut down around 400 Web sites and block 1,200 more, all alleged to dis- 
turb social order or endanger national security. 34 Although these Web sites were report- 
edly detected between March and August 2008, the blocking order and simultaneous 
requests for court orders required by law were Instituted as the Thai government faced 
challenges by protesters occupying government buildings and accusations that It com- 
mitted electoral fraud by buying votes In the December 2007 election. 36 

Providing an indication of the types of activities that will be targeted under the 
Computer Crimes Act, In March 2009 police arrested the director and moderator of the 
political news site www.prachatal.com for reportedly allowing a comment referencing 
the royal family to remain on the site for 20 days. 37 Chlranuch Premchalpom was 
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arrested under Section IS of the Computer Crimes Act, which extends the liability fox 
Illegal activities to service pxovldeis that intentionally support or consent to them.*’ 
Illegal activities defined In the framework for regulating Internet content Include 
inputting obscene data; forged or false data likely to cause Injury to another person, 
the public, or national security; and data that constitute a criminal offense relating to 
national security or terrorism. 39 Individuals who either input these Illegal data, which 
Include online messages and information, into computer systems or publish or forward 
them with the knowledge of these offenses, are subject to a maximum sentence of five 
years Imprisonment and a THB 100,000 fine. 40 

In the race to curb the "harmful" effects of social media, user-generated content, and 
the unabated growth of online commentary, Aslan governments have enacted cyber 
crimes laws that purport to deter acts of online defamation and vlgllantlsm, but could 
also potentially be applied to stifle citizen journalism. The Thai cyber crimes law 
creates civil and criminal liability for individuals who publicly post photographs of 
others that are “likely to" Impair their reputation or expose them to shame, public 
hatred, or contempt. 41 In Pakistan, a cybex crimes ordinance taking effect September 
2008 made "cyber stalking"— which requires "Intent to coerce. Intimidate, or harass 
any person" using computers or networks — a crime punishable by up to seven years' 
Imprisonment 4 * 

In Apfil 2008, South Korean President Lee Myung-bak's administration agreed to re- 
sume Imports of American beef after a five-year ban, 43 sjsarklng about a hundred days 
of candlelight vigils and some of the largest street protests In 20 years. 44 A television 
program that aired on April 29 claiming that "Koreans are 94 percent more likely to 
contract a human form of mad cow disease" also contributed to stoking online debate, 
especially on the Agora forum of Korea's second-largest portal Daum (which saw Its 
dally page view count spike from 40 million to 200 million). 44 These demonstrations 
also went Interactive: protesters uploaded Images to the Internet, sent messages on 
protest meet-ups and warnings on arrests via SMS, and threw themselves into online 
debate. 4 * Ultimately, his entire cabinet resigned and President Lee was forced to call 
for a "new beginning" for his government. 4 ' 

In the following months. President Lee’s administration Introduced legislation that 
would attempt to address the increase In rejsorted online defamation, "false rumors," 
and "malicious j>ostlngs." The regulatory body for jxtllclng online content, the Korean 
Communications Standards Commission, would be authorized to force Internet j»ortals 
and P2P Web sites to delete content or suspend publishing for a minimum of 30 days 
uj»on receiving a complaint of articles accused of being "fraudulent" or "slanderous," 
dunng which the commission would determine whether disputed articles should be 
removed permanently. 40 Internet jx»rtals that fall to temj>orarlly block online postings 
containing defamatory Information would be subject to a fine of up to KRW 30 million 
or could be forced to shut down, 49 while portals or Individuals Involved In Improperly 
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manipulating Internet search results should be sub|ect to Imprisonment of up to one 
year and a fine up to KRW 10 million. 40 The proposed addition of the crime of "cyber 
defamation'’ would punish those who openly Insult others through the Internet with 
up to two years' Imprisonment or a KRW 10 million fine. 41 

The South Korean government also pursued an approach similar to Its regulation of 
other emergent forms of harmful or Illegal content — by deputizing private actors such 
as portals, bulletin boards, and other Internet content providers (ICPs) to actively 
police slanderous content. While legislation would compel them to set up constant 
In-house monitoring functions, 4 * many of Korea's Internet portals also Implemented 
their own measures to curb postings considered to violate privacy. For example, Naver 
created a simplified process for users to Immediately block "groundless rumors or 
postings." 44 

In China, where It Is common for dissidents and activists to be charged with subver- 
sion and other crimes Involving national security for criticizing government officials 
online, 44 authorities have also begun levying criminal defamation charges against 
those who accuse them of corruption. A few cases of alleged online defamation publi- 
cized In Spring 2009 Implicated not only the freedom of expression, but also people’s 
right to criticize and make suggestions to any state organ, rights both guaranteed in the 
constitution. 44 After petitions and other attempts to protect concerned farmers' legal 
rights had failed, Wu Baoquan and Wang Shual were detained for their online criticism 
of land seizures for commercial development pushed through by local government offi- 
cials, In which farmers were Inadequately compensated after being forced off their 
land. 46 Wu Baoquan was tried twice for criminal defamation and ultimately had his 
sentence Increased to two years, although the same court that affirmed his conviction 
decided to reslew his case In April 2009” Wang Shual was detained on March 6, 2009, 
and released on ball only after signing a written confession. 48 

Since 2007, when Its bloggers (now over a million strong) reportedly began discus- 
sing sensitise topics ranging from government corruption and foreign relations to 
HIV/AIDS, 4 * Vietnam has steadily been refining Its legal framework for online activity 
to bring social media firmly under control. 

Article 12 of the Law on Information Technology defines Illegal content by proxy, 
by prohibiting the use of digital information for the purposes of opposing the state 
or undermining the "all-peoples unity bloc"; Inciting violence, propagating wars of 
aggression, sowing hatred among nations and peoples or obscenity, depras’adon, 
crime, social eslls or superstition; undermining the nation's fine traditions and cus- 
toms; revealing state secrets or other secrets provided for by law; distorting, slandering, 
or offending the prestige of organizations or the honor, dignity, or prestige of citizens; 
and advertising for or propagating goods or services banned by law. 60 Implementing 
regulations added "sowing hatred and conflict between ethnic groups and nations" to 
the list of prohibited ads. 61 
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Internet users and organizations Involved in Internet activity in Vietnam are legally 
responsible lor the content they create, upload, store, and transmit on the Internet. 62 
Bloggers are additionally responsible for ensunng that even hyperlinks do not contain 
Illegal content. 6 * However, Vietnam does oiler a "sale harbor" ol sorts for organiza- 
tions and Individuals who transmit or temporarily or automatically store Information 
created by others. Third-party hosts and providers are generally not responsible lor this 
content unless they initiate the transmission, choose recipients for the Information, or 
select or modify the contents of transmitted Information. 64 However, they are 
expressly responsible for taking "necessary measures" to stop the Illegal access to or 
Illegal deletion of Information upon government request.' 14 All online social services 
providers. Including blog service providers, must be prepared to give ad hoc as well as 
formal, biannual reports on their services. Including data on blogs that violate terms- 
of-servlce rules. 6 *’ 

Singapore, whose political elite have a long history of pursuing their opponents and 
critics with costly and frequent defamation suits, strengthened Its penal code with 
amendments (effective in 2008) to Include crimes committed by electronic means. 67 
For example, abetting a crime now Includes acts done outside of Singapore, as long as 
the crime was committed In Singapore. 6 * In May 2008, blogger Gopalan Nalr, a U.S. 
citizen living in Fremont, California, had returned to Singapore to support Dr. Chee 
Soon Juan In defamation proceedings. 6 " On May 29, Nalr posted his observations of 
the trial and called High Court |udge Belinda Ang a "stooge" who was "prostituting 
herself” as an employee of Prime Minister Lee Hslen Loong and his father. Mentor 
Minister Prime Minister Lee Kuan Yew. 70 Nalr was also accused of Insulting another 
fudge In an e-mail from 2006, and ultimately convicted of "intentional Insult or inter- 
ruption to a public servant sitting in any stage of a judicial proceeding" 71 and sen- 
tenced to three months' Imprisonment on September 17. 2008. 72 

Critics of Malaysia's ruling party also continued to be targeted through the use of 
existing punitive legal mechanisms, as reflected in the bevy of sedition, defamation, 
and even national security charges levied against blogger Ra|a Petra Kamarudln for his 
online writings. On April 25, 2008, Kamarudln had published an article on his influen- 
tial political Web site, Malaysia Today, linking Deputy Prime Minister Na|lb Razak 
(sworn in as Prime Minister In April 2009) and hh wife to the October 2006 murder of 
a Mongolian translator. 74 Kamarudln was charged with sedition In May 2008'* and 
faces three criminal defamation charges In a related case. 74 From September 12 to 
November 7, 2008, Kamarudln, who had been released on ball In May, was detained 
under Malaysia’s notorious Internal Security Act of 1960 (ISA), which authorizes the 
preventive detention of Individuals for up to two years (renewable Indefinitely) with- 
out trial or any judicial review. 76 Kamarudln was accused of creating a national security 
threat by causing potential tension In Malaysia’s multiracial and multlfalth society 
through his online activities. 77 
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In Pakistan, President Musharraf s crackdown on the broadcast media after declaring 
a state of emergency in November 2007 resulted In an actual Increase In online dis- 
semination of news and synchronldty between online and ofi-Une citizen activism. 
The Pakistan Electronic Media Regulatory Authority (PEMRA) was established when 
Musharraf allowed for the creation of privately owned. Independent broadcast media 
In 2002. As conditions for obtaining a broadcast license, media outlets were required 
to prevent content containing violence, terrorism, discrimination, extremism, sectari- 
anism. pornography, and obscenity from receiving coverage in programming and ad- 
vertising. 78 Media were also directly prohibited from broadcasting any content that Is 
obscene, disturbs public order, endangers national security, or Is "against the Ideology 
of Pakistan.” 7 * 

Upon declaring the state of emergency in 2007, Musharraf further amended PEMRA's 
charter to prohibit programming that "defames or brings Into ridicule the head of 
state, or members of the armed forces, or executive, legislative or judicial organ of the 
state." 40 Video footage of suicide bombers, other terrorists, and their victims was 
banned, 81 and PEMRA was empowered to close any broadcast service in a "situation 
of emergency" and seize equipment or seal the premises of licensees "in the public 
Interest." 42 All privately owned radio and television stations were shut down, some by 
force, 8 * and cable operators were banned from broadcasting any national or Interna- 
tional news channels. 84 Because Musharraf did not take such an assiduous approach 
toward restricting online content dunng the emergency, privately owned television 
stations taken off the air took advantage of the relative openness of the Internet and 
sent text messages announcing the live streaming of their programming online. 88 

Since 2007, offended citizens and groups In India have demanded that social net- 
working Web sites be scrubbed of what they believe to be defamatory or obscene con- 
tent online. Google's Orkut Is the most popular social networking Web site In India 
and the second-most-vlstted portal nationally. As a result of citizens filing complaints 
with the police, several Individuals have been arrested for violating Article 67 of the 
IT Act. which punishes the online publication or transmission of obscene content. 86 
In February. Chandigarh IT professional Jatlnder Singh Marok was alleged to have cre- 
ated an obscene profile on Orkut of a girl. Including her personal Identification and 
photos. 87 In another high-profile case, Rahul Krlshnakumar Vald, a 22-year-old IT con- 
sultant. was accused of posting obscene and derogatory comments about Sonia Gandhi 
on an Orkut forum. According to an official account, police obtained Vald's Identity by 
asking Google to disclose his IP address, as well as the Identification Information In his 
Gmail account. 44 

With the enactment of Its cyber crimes law in June 2007, Thailand became one of 
the few countries In Asia to require Its government to obtain court authorization to 
block Internet content. 41 ' Vietnam and South Korea are also notable In Asia for 
expressly mandating filtering as a preventive mechanism against "harmful" content 
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Vietnam Imposes a positive responsibility upon the state, society', and schools to pro- 
tect children from the negative impacts of Information that Is either obscene or Incites 
violence, which Includes authorizing state agencies to build and disseminate content 
filters.'' 0 All providers must refuse or suspend services to individuals engaged In prohib- 
ited online activities. Implement a reporting regime, and submit to Inspection and ex- 
amination by competent state agencies. However, online social service providers must 
also "block and remove Illegal content upon detection or at the request of competent 
state agencies." 91 

South Korea authorizes regulation of Internet content through the Korea Communi- 
cations Standards Commission (KCSC), whose authority' extends to ordering the block- 
ing of Web sites, the deletion of a particular message Identified as an improper 
communication, a Web site’s closure, or the suspension of the particular user ID of 
the individual who posted the Improper writing. 9 * The KCSC was originally empow- 
ered to develop general pnndples or codes of telecommunications ethics, conduct 
deliberation of and request the "correction" of Information declared illegal by presi- 
dential decree, and operate reporting centers against unhealthy telecom activities. 93 
Thus, Its filtenng mandate Is part of Its power to make determinations on Information 
"harmful" to youth, 94 as well as recommend action against Web sites containing 
Illegal content. Including pornography. Information for cyber criminals, gambling 
services, and Web sites that express support for communism or for the government of 
North Korea. 94 

Filtering 

Asia, with Its diversity', is home to several organically grown models for Internet filter- 
ing. Singapore, along with China, began experimenting with Internet filtering as early 
as 1996. Beginning September 15, 1996, users were forced to access the Internet 
through proxy servers that filtered sites banned by the Media Development Authority 
or MDA (then called the Singapore Broadcasting Authority, or SB A). 96 These servers 
reportedly contained a database of frequently accessed "approved" material, and also 
refused access according to an SBA list of banned Web sites. 97 At the dme, the SBA 
targeted primarily pornography, with plans to also restrict "unacceptable political and 
religious discussion, defamation, and racist writings." 9 * However, by 2002, these ambi- 
tions had been scaled back to the "ceremonial" filtering of a modest number of Web 
sites, a policy the government reaffirmed In March 2007. 99 

Singapore has refined a "dual regulation approach" to content regulation, 103 where 
mainstream media are state controlled or heavily regulated while alternative media 
such as Independent Web sites and blogs are relatively free to publish. At the core of 
this "light touch" regulatory framework for online content Is a class license scheme 
that requires all ISPs and those ICPs determined to be political parties or persons 
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"engaged In the propagation, promotion or discussion of political or religious Issues 
relating to Singapore" to register with the Media Development Authority. 101 Thus. 
Individuals, groups, and other organizations engaged solely In the discussion of these 
Issues online must register for a license. 10 * However, the class license scheme has been 
rarely enforced, achieving greater efficacy in cultivating what Its critics call a "culture 
of silence" through self-censorship. 103 In April 2007, the Singaporean government cre- 
ated an advisory council to study and make recommendations on Its regulatory regime 
for "Interactive digital media." 104 The Advisory Council on the Impact of New Media 
(AIMS) report, issued on December 8, 2008, praised the long-standing "light touch" 
approach to regulation of new media, while proposing some incremental changes. For 
example, AIMS recommended that the registration requirement for political parties be 
eliminated, but also argued for the class license scheme to be preserved. IUS 

Like Singapore, China promoted the development of Internet Infrastructure and 
services while strictly regulating media outlets and other forms of speech. While China 
has never formalized Its altering policy. It diverged from Singapore in developing ag- 
gressive filtering practices in concert with a robust internal market for Internet services 
and content, resulting in the emergence of public-private localized filtering. 10 * In addi- 
tion to the broad range of content filtered at the international gateways and through 
the blocking of keywords, domestic providers wishing to remain In regulatory compli- 
ance are required to install Internal filtering mechanisms and devote staff resources to 
monitor content on their Web sites or face civil and criminal liability. For example, in 
April 2009 an employee of China’s leading search engine, Baldu.com, leaked a folder 
containing the tools of internal censorship. 107 These Included lists of topics, keywords, 
and URLs to be blocked, lists of banned forums, employee guidelines for monitoring 
work, censorship guidelines for the popular Baidu discussion forums called post bars, 
and guidelines for how to search for information that needs to be banned. ,<e As a 
result. China has cultivated a model that buttresses a broad filtering regime with strict 
regulation of its own content providers, allowing It to maintain more optimal levels of 
control over its expansive domestic market. 

For governments, the surge in user-generated content and multimedia files through 
online social media sites has made the Implementation of filtering policies more com- 
plex. 100 In February 2008, Pakistan provided one of the most severe examples of a 
clumsy technical approach to restricting social media, when the government’s attempt 
to block YouTube in Pakistan made the entire Web site Inaccessible to most Internet 
users around the world for up to two hours. 110 On February 22. the Pakistan Tele- 
communication Authority (PTA) Issued an order to block access to a single video on 
YouTube— the film Film by the Dutch parllamentanan Geert Wilders that purportedly 
mocked the Prophet Muhammad — while listing three IP addresses. 111 In response, the 
Pakistan Telecommunications Company, Ltd., the telecom that Implements blocking 
orders, redirected requests for YouTube videos to Its own network. Tills rerouting 
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was advertised to the Internet at large and was picked up by the Hong Kong-based ISP 
PCCW, which then broadcast the redirect to ISPs around the world. 1,2 YouTube staff 
worked with PCCW to restore access within two hours." 3 Access to YouTube was 
restored in Pakistan alter the video listed In the PTA blocking order was removed. Indo- 
nesia followed suit, ordering ISPs to block YouTube in April 2008 over the same film 
alter Google reportedly did not respond to the government's request to remove the 
video from the Web site." 4 

Authorities in Bangladesh, a country with an Internet penetration rate of less than 
1 percent, " s nevertheless chose to block YouTUbe for a few days In March 2009 In 
order to protect the "national Interest." The disputed video covered a partial audio 
recording of a meeting between the prime minister and military officials, who were 
angry at the government's handling of a mutiny by border guards In Dhaka that left 
more than 70 people dead."* The Bengali language blogging platform Sachalayatan 
was also reported to be Inaccessible beginning on July IS, 2008, and was forced to 
migrate to a new IP address." 7 Although Its blocking was not officially confirmed, 
Sachalayatan was likely Bangladesh's inaugural filtering event. 

Even China, which has developed domestic content-control mechanisms for Its 
Internet market that help to shield It from the difficult choices facing other countries, 
can be vulnerable to the reverberations of social media. Google confirmed that 
YouTUbe was blocked In China beginning on March 23, 2009, 1,8 which media 
reported could have been prompted by a graphic video released by Tibetan exiles In 
which Chinese troops beat a group of Tibetans." 9 Multiple users also reported that 
YouTUbe was blocked In China around March 4, 2009, coinciding with the one-year 
anniversary of the aackdown on protests In Tibetan regions as well as the 50th anni- 
versary of the Tibetan uprising of 1959.' 20 

As the proliferation of borderless social media reduces the effectiveness of the 
blackllst-and-block model, governments are increasingly looking to technology compa- 
nies to act as gatekeepers for facilitating transnational public -private filtenng. ui In 
Asia, Thailand may present an example of an alternative to the approaches taken by 
China and Singapore. Thailand also blocked YouTube In April 2007 for hosting a num- 
ber of videos that Insulted King Bhumlbol Adulyade) or his family, which constitutes a 
crime of l£se majeste under Thai law punishable by up to IS years Imprisonment. 1 * 3 By 
May 2007, YouTUbe agreed to remove a number of the specified videos for violating Its 
terms of service, and the block on the YouTube domain was lifted In August 2007 upon 
Google's creation of a program of geolocatlonal filtering for blocking access to specified 
videos for users In Thailand. 123 In 2008, Investigations by a pro|ect of the MTT Free 
Culture group appeared to have uncovered the code for a technical mechanism that 
YouTUbe uses to allow certain videos to be seen everywhere except In those locations 
specified in a media restriction tag. 124 Although Thailand's filtenng of the Internet has 
been ramped up In recent years, Thai law also requires court authorization to block a 
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Web site. Thus, Thailand has secured the cooperation of the world's dominant video 
aggregator site In Implementing selective geolocadonal filtering on Its behalf, without 
having to resort to a formal or transparent legal process. Its experience could also signal 
further pubUc-prlvate transnational cooperation between governments and private 
technology companies that result In selective filtering: a Vietnamese Information min- 
istry official stated In 2008 that the government would ask transnational gatekeepers 
such as Google and Yahoo to help regulate the Vietnamese blogosphere. 125 

Ultimately, there continues to be no single or uniform approach to filtering In Asia. 
In August 2008, In contravention of Its own policy, Malaysia |olned the growing collec- 
tion of countnes that filter the Internet. On August 27, media reported Malaysia Today 
blocked by order of the Malaysian Communications and Multimedia Commission 
(MCMC) for violating Articles 211 and 233(1) of the Communications and Multimedia 
Act of 1998 (CM A). 12 * Malaysia Today was alleged to have published offensive, false, 
and Indecent content, especially "comments relating to Islam and how Muslims prac- 
tice It." 127 The blocking order was labeled a preventative action under Section 263 of 
the CMA, requiring the cooperation of licensees such as ISPs to cooperate in enforcing 
the laws of Malaysia. ,2a Former Prime Minister Mahathir Mohamad criticized this 
"reneging of a promise" not to censor the Internet as loss of credibility and the public’s 
respect.' 29 Although a government official later clarified that MCMC did not receive a 
direct order to block Malaysia Today but had exercised Its discretion under the CMA, 
Communications Minister Datuk Shazlman Abu Mansor disclosed that over 100 Web 
sites and blogs. Including Malaysia Today, were blocked for violating various sections 
of the CMA.' 10 On September 11, the Malaysian cabinet ordered the MCMC to 
unblock all Web sites, stating that existing laws would be used to prosecute blogs and 
Web sites In violation of the CMA, which would be monitored by an MCMC commit- 
tee comprising police officials, officials from the Attorney General's Chambers, and the 
Home Ministry. 111 

Conclusion 

Filtering conducted by Aslan governments followed the same broad tra|ectorles in 
2007-2008 as It had previously with some incremental changes, and continues to be 
most clearly demarcated along national lines and by local language and content rather 
than according to any regional or categorical formula. Increased scrutiny of filtering 
practices worldwide has contributed to greater awareness about escalated filtering tak- 
ing place during political events like elections and political emergencies, with at least 
six Aslan countries reported to have blocked YouTube between 2007 and early 2009. 
Most of the governments In Asia where the OpenNet Initiative conducted In -country 
testing are expanding their legal mandate and authority to filter and regulate content, 
especially in targeting online defamation. As social media platforms such as video 
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aggregator Web sites, Web portals, and online discussion forums gain in size and rele- 
vance, legal regulation of the Internet Is also converging on data-retentlon require- 
ments, delegated liability for ISPs and ICPs, increased criminal penalties for content 
producers, and other mechanisms that could create a dragnet around the Individuals 
operating In these increasingly networked public spheres. These measures fall In line 
with emerging second-generation controls. 
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Burma 


Despite very low connectivity, Inter- 
net users In Burma have managed to 
communicate valuable Information 
to the outside world during explosive 
political events. The Burmese military 
government continues to enforce 
stringent overall access restrictions, 
the most extreme of which occurred 
during the complete shutdown of the 
Internet In Burma In September and 

October 2007. On top of these barriers to access, the government also polices Inter- 
net content through one of the most severe regimes of Information control In the 
world. 



Background 

The State Peace and Development Council (SPDC), the military government that rules 
the Union of Myanmar, maintained Its stranglehold on economic and political devel- 
opments In Burma through several major crises In 2007 and 2008. 

On August 19, 2007, precipitating what would become known as the Saffron Revo- 
lution, leaders of the 88 Generation student movement organized a rally to protest 
a sudden sharp Increase In fuel prices In Rangoon (Yangon).' Burmese spend up to 
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1 KEY INDICATORS [| 

GDP per capita. PPP (constant 2005 international dollars) 

854 

Life expectancy at birth (years) 

62 

Literacy rate (percent of people age 15+) 

90 

Human development index (out c4 1 79) 

135 

Rule cA law (out of 21 1) 

199 

Voice and accountaMity (out of 209) 

208 

Democracy index (out of 1 67) 

163 (Authoritarian regime) 

Digital opportunity index (out of 181) 

179 

Internet users (percent of popdation) 

0.1 


Source by indicator: World Bank 2005. World Bank 2009a, World Bank 2009a. UNDP 2006. World 
Bank 2009b. World Bank 2009b. Economist Intelligence Unit 2008. ITU 2007, ITU 2008. 


70 percent of theli monthly Income on food alone, 2 making the fuel price hikes amid 
chronic inflation— which reached 30 percent in 2006 and 2007— untenable. 3 Over the 
next month, leadership of the protests passed from the former student leaders and a 
number of female activists to Buddhist monks, with participation swelling to an esti- 
mated crowd of ISO.OOO protesters on September 23« Throughout the crisis, citizen 
journalists and bloggers continued to feed raw, graphic footage and eyewitness 
accounts to the outside world over the Internet. The violent crackdown that began on 
September 26 ultimately left up to 200 dead, 5 Including a Japanese journalist whose 
shooting was caught on video* Burmese security forces raided monasteries, detaining 
and disrobing thousands of monks, and despite claims In official state media that only 
91 people remained In detention as of December 2007, Human Rights Watch claimed 
the number to be In the hundreds. 7 

On May 2 and 3, 2008, Cyclone Nargls hit lower Burma and devastated Rangoon and 
much of the Irrawaddy River delta, with more than 138,000 dead or missing and mil- 
lions in need of food, water, shelter, and medical care* After Initially blocking aid for 
two critical weeks, the |unta accepted relief efforts coordinated through the Tripartite 
Core Group— the military |unta, the United Nations (UN), and the Association of 
Southeast Aslan Nations (ASEAN)— and has been cautiously credited with exhibiting 
greater openness since. 1 * However, a year later, half a million people were still Using In 
temporary shelters, over 200,000 lacked local supplies of drinking water, and villagers 
were stlU coping with chronic food shortages and the slow resumption of farming and 
fishing.' 0 A recovery program requiring USD 690 million through 201 1 had raised only 
USD 466 million in commitments at the end of 2008.” 

On the heels of the release of Burma's longest -serving political prisoner, Win Tin, a 
79-year-old |oumaUst freed as part of an amnesty granted to 9,000 Inmates, 12 around 
300 Individuals were sentenced to harsh prison terms for political crimes between 
October and December 2008.” Most were tried by police prosecutors and convicted by 
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fudges operating (rom prison courts, including the notorious Inseln prison. 14 During 
the week ol November 10, 2008, alone, more than 80 individuals were convicted. 
Including 14 democracy activists who were sentenced to 6S years' imprisonment tor 
leading protests In the summer of 2007, Buddhist monks, poets, musicians, and stu- 
dent leaders. ,s According to the UN Special Rapporteur on the situation of human 
rights in Myanmar, 16 (ournallsts and bloggers were In prison In March 2009. 16 Not 
surprisingly, given the crackdown that followed, the Committee to Protect Journalists 
has labeled Burma the worst place In the world to be a blogger. 17 

On May 14, 2009, Nobel laureate and democracy leader Aung San Suu Kyi was taken 
from her home to Inseln prison to stand charges of violating the terms of her house 
arrest by affording temporary shelter to an American man who had swum across a 
lake to her residence. 18 Aung San Suu K>1, facing five years' imprisonment under these 
charges, had lived under house arrest for 13 of the past 19 years, and she was arrested 
only weeks before her current six-year term was set to expire. 19 

Internet In Burma 

Unlike the rest of Asia, a combination of government restrictions, connection speeds, 
and prohibitive costs has kept Internet access rates relatively stagnant In Burma. The 
International Telecommunications Union estimates the number of Internet users at a 
low 45,000 for 20G8, 20 representing a steep drop from recent figures of up to 300,000 
users. 7 1 Burma's fixed- line, cell phone, and Internet penetration rates remain below 
1 percent. 27 Connection speeds are slow, and steep costs significantly limit access. For 
example, initial costs for broadband range from USD 900 on Myanmar Teleport (MMT) 
to USD 2,300 on Myanmar Post and Telecommunication (MPT), with wireless access 
on MMT starting at USD 1,500“ As a result, broadband is available only to an esti- 
mated 2,000 subscribers, primarily government and businesses and used mostly for 
Internet telephony by VoIP. 24 Assuming that there are about ten to IS users per 
subscription, media have calculated that there are more than 300,000 users of MMT 
(formerly Bagan Cybertech) and MPT, the two state-owned ISPs. Costs limit access 
significantly: even households that can afford a personal computer and long-distance 
connection fees outside the capital Rangoon and Mandalay cannot pay USD 20 per 
month and upward for a dial-up or broadband account.* 4 

According to news reports, an entity called Information Technology Central Services 
(ITCS) was launched in 2007, to be run by the government-aligned Union Solidarity 
and Development Association. 2 * Though ITCS Is not an ISP, It provides telecommuni- 
cation services such as voice mall, mall to SMS (short message service, or text message), 
and an Information portal (www.khltlunge.org.mm). 

However, the arrival of a new ISP, predicted to become the largest In Burma, pre- 
sented the most convincing evidence that the government Intended to expand 
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Internet access while maintaining strict control over online activity. The new ISP, 
Hanthawaddy National Gateway, which was reportedly launched in July 2008, will 
serve the entire country with the exception of Rangoon. 27 In the case of Hanthawaddy, 
which officials state will operate to "International standards,” Internet security will be 
achieved largely through filtering. According to an MPT official, 'The main advantages 
of having this ISP is that the Internet connection will be fast-moving, and good secu- 
rity will be available because of the website filtering system/' 28 The Irrawaddy, an over- 
seas news site, reported that Hanthawaddy "received technical assistance from China’s 
Alcatel Shanghai Bell Company.”* 9 

As a signatory to the e-ASEAN Framework Agreement Initiated In 2000, Burma has 
formed the e-National Task Force to support IT development-* 9 Yadanabon Cyber City 
(In Pyln Oo Lwln), set to become Burma's largest rr development. Is also part of an 
Information and communications technology (1CT) development master plan under 
the Initiative for ASEAN Integration (IAI).*' 

Although the government Initially cited a preference for Investment from local com- 
panies or foreign companies that are cooperating with local companies, rather than 
solely forelgn-owned enterprise, three foreign companies — Russian-owned CBOSS, 
Maxlnet of Australia, and Global Technology (believed to be based In either Thailand 
or the U.K.) — were among the 12 technology companies approved to Invest USD 22 
million in the site, which Is somewhat Isolated by being 30 miles from Mandalay.* 2 
However, Shin Satellite of Thailand, Alcatel Shanghai Bell of China, and Malaysia's IP 
Tel Sdn Bh were reportedly rejected as Investment partners.** The Irrawaddy quoted 
sources from computer universities as stating that Yadanabon's objective was to tighten 
control over Internet connections as well as prevent users from gaining access to or 
distnbutlng information critical of the regime.* 4 

Both MPT and MMT are currently connected to the Hanthawaddy Gateway back- 
bone (a move announced in September 2008 but only recently executed),* 4 but 
Yadanabon will ultimately serve as the national backbone (with a bandwidth of 600+ 
Mbps according to some sources), connected to China and eventually India and 
Thailand through overhead optical fiber (STM 1 or higher), underground optical fiber 
(STM 1 or higher), satellite communication systems, and the SMW-3 undersea cable 
system.* 6 

To counterbalance price and access controls, most users access the Internet in Inter- 
net cate (between USD 0.30 and USD 0.S0 per hour).* 2 Officially, there are 433 public 
access centers (PACs) nationwide, and the government plans to achieve full coverage 
of PACs In every township In the country.” In reality, the number of PACs and Inter- 
net cate has Increased rapidly In Rangoon, Mandalay, and other major towns and 
does across the country, with more than 1,000 PACs operating without licenses In 
Rangoon alone.* 9 Some PACs are owned by Union Solidarity and Development Associ- 
ation (USDA) and run Internet caff services in their local offices in townships. Some 
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PACs provide VoIP services such as Skype, Pfingo, MedlaRlngTalk, and others. Centers 
are prevented from Installing bypass software on their computers, but generally allow 
customers to use laptops. According to one PAC operator, 60 percent of users use dial- 
up connections or prepaid access kits while the rest use broadband connections such as 
ADSL or WIMAX, as well as satellite connections provided by the state-controlled MMT 
and MPT. 

Despite the limitations imposed on connectivity in Burma, throughout the days of 
escalating protests In September 2007 and the first glimpses of a violent crackdown, a 
small band of citizen bloggers and (ournallsts fed graphic footage and eyewitness 
accounts to the outside world through the Internet and their personal networks.* 0 
Vital information, including photographs and videos taken with cell phones and digi- 
tal cameras and not obtainable through traditional means, was uploaded to the Inter- 
net, broadcast over television and radio, and spread In communities throughout the 
country. Although described Invariably as tech-savvy university students and youth, 
these citizen (ournallsts helped multiple generations of Burmese to find linkages to 
each other through blogs and other social media. 4 ' 

On September 29, 2007, the SPDC made use of Its comprehensive control over the 
country's Internet gateways to completely shut down Internet access, with Intermit- 
tent periods of connectivity, for approximately two weeks. 42 A small group of netlzens 
had vividly demonstrated that the tools of Information technology can have a strong 
Impact on the global coverage of events as they are unfolding. The Internet shutdown 
was the government’s most direct and drastic option to cut off this bidirectional flow 
of Information, so that the picture of reality for people on both sides of the Burmese 
border would remain distorted. 

In April 2008, the overseas news organization Mlzzlma News reported that the 
government had formulated a sector-based Internet shutdown strategy to deal with 
the constitutional referendum scheduled for May 10. 45 As soon as Information leaks 
began, Internet cafes and PACs would be cut ofl, followed by the commercial sector 
If Information continued to flow out, and presumably by the hospitality and tour- 
ism sector. Authorities planned both shutdowns of access and significant slowdowns 
In connection speeds, 44 a strategy that was made moot In the wake of Cyclone 
Nargls. 

Slowdowns in Internet access speeds are not Infrequent in Burma. For example, 
a prolonged slowdown on MMT began on March 22. 2009, and continued until 
April 21. 44 MMT had announced that the submarine cable SE-ME-WE 3 (South East 
Asia Middle West Europe 3) would be undergoing maintenance from March 21 to 
March 25, but both MMT and MPT shut down their service for several hours on the 
afternoon of March 22. For end users, the announced network maintenance resulted 
In frustration with delays (In addition to those caused by the use of circumvention 
tools) In accessing popular online services, including Gmail, Google Talk, Skype, 



4J6 


Burma 


Pfingo, and VZOChat, while many Internet cates were closed while waiting lor the 
resumption of normal Internet access speeds. 

Slow upload speeds are an Indication not Just o< capacity In Burma, but also of Inten- 
tional design. Even after connectivity was largely resumed after the Internet shutdown, 
Internet speeds controlled with proxy caching servers were slowed to 256 Kbps In a 
likely attempt to pres'ent or diminish the uploading of videos and photos. 46 Although 
broadband subscribers can choose to pay according to access speeds (512 kbps, 256 
kbps, or 128 kbps), they must also accept upload speeds that are half the download 
speeds In each subscription. 47 

Legal and Regulatory Frameworks 

Despite ongoing and grave human rights violations commuted by the SPDC, equal 
protection under the law (Art. 847), freedom of expression and peaceful assembly 
(Art. 354), the right to education (Art. 366), freedom of religion (Art. 36), and other 
fundamental rights are guaranteed In the amended constltuUon adopted In May 
2008. 48 Although the SPDC has stated that 380 domestic laws are being reviewed for 
compliance with constitutional human rights provisions, 49 It continues lo apply broad 
law and regulations to punish citizens harshly for any activity deemed detrimental to 
national interests or Its continued grip on power. 

All domestic radio and television stations, as well as dally newspapers, are state 
owned and controlled. 40 While more than 100 print publications are now privately 
owned, 41 the Ministry of Information limits licensing to media outlets that agree to 
print only approved material and to submit to vigorous advanced censorship by Its 
Press Scrutiny and Registration Division. 42 For example. In the wake of Cyclone Nargis, 
media were prohibited from pubUshlng stories depicting the devastation and human 
suffering. 44 Publishing license regulations Issued by the Ministry of Information In 
2005 are prodigious In scope, banning negative new and commentary about ASEAN, 
any "nonconstructive" criticism of government departments, coverage of national dis- 
asters and poverty that affect the public interest, and the citation of foreign news 
sources that are detrimental to the state. 44 In effect since 1962, the Printers and Pub- 
lishers Registration Law applies to all "printed published matter" and requires the reg- 
istration of all printing presses, printers, and publishers, as well as the submission of all 
books and newspapers as they are published. 44 Similar restrictions apply in the Video 
and Television Law, which provides for three years' Imprisonment for “copying, dis- 
tributing. hiring or exhibiting videotape" that has not received the prior approval of 
the Video Censor Board. 46 

Online access and content are stringently controlled through legal, regulatory, and 
economic constraints. As In other areas, however, the state’s policies are difficult to 
assess because they are rarely published or explained. 
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According lo the 1996 Computer Science Development Law (CSDL), network-ready 
computers must be registered (for a fee) with the MPT; failure to do so can result in 
fines and prison sentences of seven to IS years.” In the Electronic Transactions Law 
(2004), anyone who uses "electronic transactions" technology to receive or send in- 
formation relating to state secrets or state security or to commit any act harming state 
security, community peace and tranquility, or national solidarity, economy, or culture 
can be sentenced to between seven and IS years’ Imprisonment. * 8 Terms-of-servlce 
rules for MPT users issued in 2000 provide a warning that online content will be sub- 
|ect to the same kind of strict filtering that the Press Scrutiny and Registration Division 
carries out: users must obtain MPT permission before creating Web pages, and they 
cannot post anything "detrimental" to the government or simply related to politics.** 
Furthermore, sharing registered Internet connections Is also punishable by revocation 
of access and the threat of "legal action." 60 the equivalent to which can be found 
In the CSDL, which punishes unauthorized computer networks or links with seven to 
15 years’ Imprisonment. 61 The MPT can also "amend and change regulations on the 
use of the Internet without prior notice." 64 

The threat to the |unta posed by Burmese activists and other dissenting voices using 
online tools to communicate with and transmit information to the outside world be- 
came evident In the rash of draconian sentences handed down in November 2008 
against 88 Generation's leaders, bloggers, and others. Closed courts, mostly operating 
out of lnseln prison, applied the Electronic Transactions Law and the Television and 
Video Law to deliver sentences of up to 65 years. On November 1 1, fourteen 88 Gener- 
ation activists were sentenced to 65 years' Imprisonment, a staggering term consisting 
of IS years for each of four counts of illegally using electronic media 6 * formation of an 
Illegal organization added five years to that sentence. 64 Nay Phone Latt, a blogger and 
owner of several Internet cafes, was arrested In January 2008 and sentenced in Novem- 
ber to 20 years' imprisonment by a special court In lnseln prison, IS of those years for 
violating Articles 33(a) and 38 of the Electronic Transactions Law and over three years 
of the sentence for violating Article 32(b) and 36 of the Teleslslon and Video Law.®* 
The Electronic Transactions Law also constituted part of the S9-year sentence 
handed down to comedian, film director, and blogger Maung Thura (who uses the 
stage name Zarganar), convicted for circulating his footage of relief work after Cyclone 
Nargls on DVD and the Internet, as well as for giving Interviews critical of government 
aid efforts to overseas media. 66 Both Nay Phone Latt and Zarganar had their sentences 
reduced, to 12 and 35 years, respectively. In February 2009 67 
As for Internet caffes, the government has been urging business owners to become 
licensed as PACs under the management of Myanmar Info-Tech, a state-owned com- 
pany. 68 The general manager of Myanmar Info-Tech claimed that more than 1,000 
Internet caffes were operating In Rangoon without PAC licenses, and caffe owners 
reportedly have Informal bribe-paying arrangements with government employees that 
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allow them to operate and offer proxy tools and other services that are technically 
forbidden. 69 In addition to requirements that screenshots be taken every five minutes 
and that records of Internet usage be sent to Myanmar Info-Tech every two weeks, cafe 
owners are told to arrange computer monitors for easy public viewing and to ensure 
that only state-run e-mail providers are used 70 Operators of I’ACs must also record 
the names. Identification numbers, and addresses of their customers. 71 However, It is 
widely reported that, despite regular crackdowns, most PAC owners largely Ignore 
these regulations and provide customers with proxy servers and alternative means of 
accessing blocked Web sites.™ 

Surveillance 

In Burma, the fear of surveillance Is pervasive and embedded In dally life. 73 Offline, 
the state can effectively monitor Its citizens through a dragnet that functions with the 
assistance of various civilian organizations It directly controls. These overlapping 
organizations include mass organizations such as the USDA, which Imposes mandatory 
membership on citizens In specific professions and Is being cultivated as a "future 
military-controlled civilian government In Burma," with President Gen Than Shwe as 
a primary patron. 74 State and local Peace and Development Councils (PDCs) are also 
effective tools of social control. For example, all households must provide their local 
ward PDCs with a list and photographs of all persons residing In the household and 
register any overnight guests before dark, a policy that is reinforced by regular mid- 
night checks of homes. 74 Another mass-based organization, known as the Swan Arr 
Shin, pays Its members to conduct routine neighborhood surveillance and police as- 
sistance, delegating others to engage In violence against opposition figures for higher 
remuneration. 76 Durtng the Fall 2007 protests. Intelligence officials videotaped and 
photographed protesters, and security forces relied on the Information to enlist PDCs, 
the USDA, and local law enforcement authontles In Identifying Individuals In order to 
Immediately begin making arrests In the ensuing crackdown. 77 

Until It was disbanded In 2004, the Defense Services Computer Directorate (DSCD) 
had become focused on Information warfare operations such as monitoring telephone 
calls, faxes, and e-mails focused on military communications, while the computer center 
of the intelligence agency Directorate of Defense Services Intelligence (DDSI) under the 
Ministry of Defense monitored opposition groups. 78 After the DSCD was reformed as the 
Military Affairs Security (MAS), It presumably took over Information warfare dudes. 79 

While the government’s apdtude at conducdng online surveillance Is not endrely 
dear. It certainly appears to be pursuing a combination of methods to monitor the 
small propordon of Its citizens that access the Internet. Despite the reported wide- 
spread lack of compliance, at the most popular Internet access point — Internet 
caffs — owners and operators, as mentioned earlier, are required to record users' per- 



Burma 


4J9 


sonal Identification, take screenshots every five minutes, anange computer monitors 
for easy public viewing, allow the use of only state-run e-mall providers, and forbid 
the use of circumvention tools. 60 A new service In 2009. Mtalk, offers an instant mes- 
saging application and private e-mail and is a rare joint venture between MPT and a 
private company. Myanmar Technology Gateway. 61 Mtalk’s MIT-hosted server can 
access GTalk with a single login, causing Internet users to worry about potential sur- 
velllance and the exposure of their contact lists. 6 * 

The military government’s stringent filtering regime fosters fear and self -censorship. 
For example, according to ONI sources the banning of certain political blogs In mld- 
2007 sparked rumors that more would be banned if this trend continued, spurring 
many local bloggers to self-monitor their postings In the hope that their blogs would 
not be added to the blacklist.’ 1 Government e-mall services, theoretically boosted by 
the blocking of many free Web-based e-mall services, are widely believed to be under 
surveillance, with delays of up to several days between the sending and receipt of 
e-mails, or with messages appearing with attachments deleted. 64 Blogger Nay Phone 
Latt was allegedly convicted In part for storing a cartoon of General Than Shwe In his 
e-mail account. 44 Internet slowdowns fuel speculation of enhanced online monitoring, 
especially where users are required to dick through pages equipped with network visi- 
bility applications (such as Bluecoat) that allow for monltonng of network activity and 
behavior In order to access the Internet. 4 ® 

Surveillance methods are more elfectlve when there are fewer targets, and a possible 
strategy of the Burmese regime may be to keep more people offline. iXinng the October 
2007 Internet shutdown, surveillance, or at least perceived surveillance, was attnbuted 
as a rationale for various government responses, lndudlng the government’s policy 
of originally limiting Internet access to the curfew hours between 9:00 p.m. and 
5:00 a.m. 67 Not only would the late hours significantly reduce the number of users 
(as most Burmese users do not have access to the Internet at home), but It would 
also make the task of Identifying targeted users easier for a government without much 
expertence In tracking and investigating Internet usage. 

In 2008, persistent and severe distributed denial of service (DDoS) attacks hit the 
Democratic Voice of Burma (DVB) and Mlzzlma News In July, the community forums 
Mystery Zillion and Planet Myanmar In August, and The Irrawaddy. DVB, and the New 
Era Journal In September. 66 In all these attacks, these Web sites, mostly overseas news 
organizations, were effectively Inaccessible after being flooded with data In short 
amounts of time and thus becoming overloaded with information requests. 69 

ONI Testing Results 

In verifying the parameters of the Internet shutdown In September 2007, researchers 
from the OpenNet Initiative were able to determine the outage periods using router 
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paths advertised by the Autonomous Systems (AS) cones ponding to these ISPs, 
recorded by Border Gateway Protocol (BGP) monitors of the RIPE project. 90 The outage 
on MPT. the main government ISP, can be divided in two phases. Phase One of the 
outage was a complete shutdown from September 29 to October 4 91 The sole ex- 
ception was one brief period of connectivity on October 1 for six hours starting at 
6:3S p.m. Phase TVo consisted of a regulated outage lasting all day except during the 
period between approximately 10:00 p.m. and 4:00 a.m. each night from October 4 
through October 12. On October 7, MIT had one extra period of connectivity from 
9:40 a.m. to 3:37 p.m. In addition to Internet connectivity coinciding approximately 
with the curfew period. 92 there Is evidence that the Internet was also available from 
around noon (starting anywhere between 11:00 a.m. and 1:00 p.m.) until approxi- 
mately 4:00 p.m. from October 9 to October 12. As of noon on October 13, MPT 
appears to have resumed operation as a stable network with few changes In routing 
paths. 

The outage on BaganNet follows a similar pattern, with Phase One comprising a 
complete shutdown from 7:00 p.m. on September 29 until 10:24 p.m. on the evening 
of October 4, also with one exception. Phase Two comprises a regulated shutdown all 
day from October 4 until October 9, except dunng the curfew period from 10.00 p.m. 
to 4.-00 a.m. As BaganNet's Internet connectivity is established through MIT, It was 
also up from October 9 through October 12 during the approximate curfew period as 
well as for a period starting between 12:00 p.m. and 1:30 p.m. for a few hours dally. 
Two long periods of connectivity thereafter, the first from 10:00 p.m. on October 12 
to 4:04 a.m. on October 13 and the second from 12:0S p.m. on October 13 to 10:40 
p.m. on October IS, were followed by one long outage, from 10:40 p.m. on October 
IS to 9:00 a.m. on October 16. Throughout the outage, a small collection of pre- 
approved Web sites on the country's Intranet, known as the Myanmar Wide Web, 
was unaffected. 

Testing was conducted on MMT and MPT at various periods In 2008 and early 2009. 
Both MMT and MPT continued to filter extensively and focused overwhelmingly on 
Independent media, political reform, human rights, and pornography sites relating 
to Myanmar, as well as free Web-based e-mall services and circumvention tools. While 
MMT blocks entire root domains, MPT Is slightly more selective and only Mocks spe- 
cific pages of sensitive Web sites— MPT treated Blogs pot and the Asia Observer this 
way, blocking a number of URLs but not the root domain. 

Both ISPs blocked approximately the same number of circumvention tools. Includ- 
ing Proxlfy, Proxyweb, Guardster, and Proxyweb.net. Psiphon was inconsistently 
blocked: It was filtered at one time during testing but was accessible at others. 

In June 2006, Gmail and Google Talk were made Inaccessible and Skype was 
banned 91 — reportedly an attempt not only to censor communications but also to 
preserve the government's monopoly over telephone and e-mall services as MIT's rev- 
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enucs dipped/'* Testing by ONI confirmed filtering practices consistent with 2007 find- 
ings: search engines as well as the suite of additional services (e.g., Google Groups, 
Plcasa, Google Docs, Google News, and Google Translate) offered by Google, Yahoo, 
and MSN were all accessible, with the exception of Google Video and google.at 
(Austrian Google), which were blocked by MPT. However, free e-mail services con- 
tinued to be filtered, with Yahoo! Mall, Gmail, Hushmall, and mall2web blocked by 
both ISPs. In addition, MPT took the precaution of blocking additional e-mall sites 
including hotmall.msn.com (though not www.hotmall.com). While MMT and MPT 
blocked the Web site www.skype.com, once Skype Is accessed and downloaded using 
circumvention tools. It Is possible to use the Skype VoIP service on both ISPs. 

Testing in 2008-2009 revealed that MMT targeted social media sites more than MPT. 
Only MMT blocked Fllckr, YouTube (although MIT blocked Google Video), Geodtles, 
and Blogspot. Blocking of the entire Blogspot/Blogger domain by MMT rendered many 
of the blogs that were the most active In disseminating images and Information relat- 
ing to the Saffron Revolution Inaccessible. However, while MPT kept the Blogspot 
domain open. It blocked the Individual blogs of at least four prominent bloggers fea- 
tured by international media dunng the Saffron Revolution: ko-htlke.blogspot.com 
and nlknayman.blogspot.com, two blogs reported blocked In September 2007, 95 as 
well as moemaka.blogspot.com and myochltmyanmar.blogspot.com. To avoid being 
casualties of the blocking of popular domains such as Blogspot and Wordpress, blog- 
gers sought their own personal domain, such as blog.mghla.com, with Its content 
hosted by Blogspot. 

International news agencies filtered by both ISPs included Radio Free Asia (www 
.rfa.org), the Voice of America Burmese and English Web sites, and the BBC Burmese 
service. Only MPT blocked the main BBC Web site and BBC News, while MMT filtered 
CNN and the Financial Tima. Both MMT and MPT blocked many ma|or Independent 
news sites reporting on Myanmar, Including overseas regional publications such as 
The Irawaddy, Mizzima News, Demociatk Voke of Bunna (www.dvb.no), and BunmNet 
News , as well as Web sites exclusively in the national language (svww.burmatoday.net). 
While both ISPs blocked some regional publications, such as Thailand's The Nation 
newspaper, the Asia Times (www.atlmes.com), and the Aslan Tribune, MMT targeted 
regional news sites slightly more than MPT. 

Web sites containing content on human rights advocacy and democratic reform 
continued to be a priority for blocking. A substantial number of nongovernmental 
organization Web sites with different levels of Involvement in Myanmar human nghts 
Issues svere blocked on both ISPs, from International rights organizations such as 
Human Rights Watch, the Open Society Institute, and Amnesty International, to a 
wide range of Burma-focused groups (e.g., Burma Watch; www.burmacampalgn 
.org.uk). Within this group were Web sites documenting the persecution of ethnic 
minorities and the personal Web site of Aung San Suu Kyi. Other continuities in 
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blocking between 2006 and 2007 and 2008-2009 included coalitions lor democratic 
change In Myanmar, such as the Web site of the coalition government ol the Union 
of Burma (www.ncgub.net), opposition movements (www.chlnforum.oig), and rights 
groups (www.womenofburma.org). 

There continue to be Indications that the military government does not take an 
entirely systematic approach to filtering. For example, MPT appeared to have reduced 
filtering of certain content from previous testing periods, particularly of pornographic 
or adult content sites. Based on testing conducted In 2008 and 2009, It now appears 
that MMT has overtaken MPT in blocking pornography. 

In addition, as was the case In 2006-2007, testing done In 2008-2009 found signifi- 
cant differences In filtering between the two ISPs. Of the sites blocked, less than a third 
were filtered on both ISPs. The remaining blocked Web sites were blocked on one ISP 
or the other, but not both. MMT blocked a greater number of Web sites dealing with 
domestic Issues, where the term "Burma" or "Myanmar" In the URL was one of the 
common threads among the filtered list. Thus, groups critical of the government 
(the Burma Lawyer's Council) as well as peripheral personal Web sites (such as those 
with photographs of Myanmar) were blocked. On the other hand, MPT chose to filter 
some additional Web sites of International organizations, including the UN’s Human 
Rights page (www.un.org/rlghts) and the Center for Constitutional Rights, and partic- 
ularly those with projects related to Burma listed on their home pages. Including Earth- 
Rights International (www.earthrlghts.org) and the International Confederation of 
Free Hade Unions. 

Conclusion 

The Burmese military government has demonstrated that It Is willing to take extreme 
steps to maintain Its control over the flow of Information within and outside Its 
borders. Including shutting down Internet access entirely. Despite the ability of a small 
group of Internet users to continue to disseminate Information online, access to con- 
nectivity as well as actual content are severely hampered by extensive filtering, strin- 
gent laws and regulations, and heightened surveillance, all factors contttbutlng to a 
pervasive climate of fear. 
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China has devoted extensive resources 


to building one of the largest and 
most sophisticated filtering systems 
In the world. As the Internet records 
extraordinary growth In services as 
well as numbers of users, the Chinese 
government has undertaken to limit 
access to any content that might po- 
tentially undermine the state's control 
or social stability by pursuing strict 

supervision of domestic media, delegated liability for online content providers, 
and. Increasingly, a propaganda approach to online debate and discussion. 



Background 

The convening of the Seventeenth Chinese Communist Party (CCP) Congress In Octo- 
ber 2007, at which China's top echelon of government leaders chose their eventual 
successors, was the beginning of a momentous year for China, and consequently for 
domestic and international news media. On March 10, 2008, hundreds of monks In 
the Tibetan autonomous region led a series of protests to demand loosening of restric- 
tions on religious practices and even independence for Tibet. 1 Chinese authontles 
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1 KEY INDICATORS 1 

GDP per capita, PPP (constant 2005 international dollars) 

5.084 

Life expectancy at birth (years) 

73 

Literacy rate (percent of people age 15+) 

93 

Human development index (out c4 1 79) 

94 

Rule cA la%v (out of 21 1) 

121 

Voice and accountability (out of 209) 

196 

Democracy index (out of 167) 

1 36 (Authoritarian regime) 

Digital opportunity index (out of 1 81 ) 

77 

Internet users (percent of population) 

22.6 


Source by indicator World Bank 2009a, World Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economist Intelligence Unit 2008, ITU 2007, ITU 2008. 


rapidly responded with arrests and a violent crackdown against thousands of monks 
and noting Tibetans. 2 A corresponding dampdown on reporting from the region and 
other Tibetan-populated areas In western China left media with a dearth of reliable in- 
formation; official accounts and dispatches released by Tibetan exile organizations put 
Issues bke the actual death toll in question. The crackdown In Tibet galvanized protests 
both In support of and opposed to China’s policies toward Its religious and ethnic 
mlnondes, especially as symbolized in the Olympic torch making Its way In an elabo- 
rate tour around the world. The conflicts that erupted In dtles as distant as Paris 3 and 
Seoul in March and April contributed to a srxalled transnational Chinese backlash 
against Western media portrayals of China, culminating In an "and-CNN" movement 
and a call for a boycott against the French supermarket chain Carrefour.* 

On May 12, 2008, a 7.9-magnltude earthquake, with Its epicenter in Wenchuan 
county, Sichuan province, killed around 90,000 people and ln|ured hundreds of thou- 
sands, leveling more than S million buildings and leaving millions homeless. 3 During 
the massive relief efforts and nadonal mobilization of volunteers and monetary contrl- 
budons Immediately following the quake, media were allowed to operate with unprec- 
edented openness, with official state outlets such as China Cendal Television winning 
notice and praise for presendng timely and uncanned news. However, within a few 
weeks authontles began to encircle and regulate the story — for example, by Issuing 
more bans on coverage of certain topics and requiring reglstradon of reporters. It took 
authorldes repeated efforts to quash coverage of one of the most potent and enduring 
controversies: the tragic deaths of thousands of schoolchildren and teachers attributed 
to shoddy school construcdon, along with the lmpllcadon that government officials 
were responsible. 6 Authorldes did not release an official stadstlc of the number of 
schoolchildren who died until almost a year after the quake, and some claimed that 
the official figure of S.33S was too low, compared to Reuters' estimate of 9,000 deaths, 
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calculated from reports by the state news agency and local media. 7 This accusation led 
one commentalor to stale, "Chinese news reports on this major story unfolded In a 
complicated environment, and It Is Impossible to render a simple verdict about media 
coverage." 8 

With more than USD 40 billion spent on hosting the 2008 Olympic Games In Bel- 
ling, the Chinese government acted to assert control over this global event while pre- 
senting an open and welcoming environment for athletes, media, foreign dignitaries, 
and visitors. 9 As part of these overtures, the government Issued regulations In January 
2007 allowing journalists to travel across the country without registering with local 
authorities and to Interview sub|ects without official consent." 1 While the unblocking 
of Web sites and Improved access to officials at Olympics venues marked some Im- 
provement In openness and transparency, the government also stepped up surveil- 
lance around Beijing and prevented activists from petitioning to use legally sanctioned 
protest zones. 

After a news conference held by the U.S. men's volleyball team. In which several 
Chinese reporters had their notebooks (and at least one tape recorder) confiscated. Bel- 
ling Olympics spokesman Sun Welde denied knowledge of this differential treatment 
of Chinese reporters: "1 am not very clear about the situation you raised," he said. 
"For Chinese Journalists, they very much enjoy the rights to cover the Bet|lng Olympic 
Games. ... the rights are protected by the constitution In China." 11 Yet China’s "open- 
door" policy for Journalists as a result of the Olympics had a marginal impact on Olym- 
pics coverage by domestic media. The government persisted In Its dampdown on local 
Chinese media , li and the Foreign Correspondents’ Club of China confirmed 63 cases 
of reporting interference during the Olympics, out of a total of 178 In 2008, Including 
ten Inddents of police roughing up rejsorters and breaking their cameras. 13 While the 
relaxed rules for foreign Journalists were made permanent In October 2008, 14 new rules 
Issued In February 2009 required reporters based In Hong Kong and Macao to apply for 
a permit prior to every reporting trip to mainland China. 14 

A month after the Olympics conduded, a scandal erupted over tainted milk products 
that killed six Infants and sickened nearly 300,000 others.' 6 Information soon emerged 
Indicating that provincial governments and central government agendes, as wdl as 
offidals from the Sanlu group, China’s leading seller of milk powder, had either sup- 
pressed earlier reports or failed to act, likely at the cost of human lives. 1 ' Although 
It had been receiving complaints about Its Infant milk powder since December 2007, 
the Sanlu group only Informed Its board In August 2008, prompting Its Joint ven- 
ture partner Fonterra to Inform the New Zealand government. 18 A reporter for the 
newspaper Southern Weekend, known for Its Investigative reports, wrote In a blog post 
that he and several other Journalists were prevented In July from publishing findings 
about how milk powder was making children sick because of pressure from Sanlu 
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officials as well as an overall Olympics-xelated dampdown on negative news cover* 
age. 19 In January 2009, 21 defendants were convicted for their roles In the production 
and sale of mdamlne-talnted products, Including two melamine producers, who 
received death sentences, and the former Sanlu chairwoman, who was sentenced to 
life imprisonment. 20 

As 2008 progressed, the Chinese government demonstrated a perceptible shift In Its 
media-control policies In order to better manage the handling of negative news 
reports, which continued to spread with Incredible speed and intensity on the Inter- 
net. This approach Involves the government responding more actively and rapidly to 
fast-breaking news events, primarily by attempting to set the agenda for coverage 
rather than suppress It. 21 With lessons learned about the upsides of transparency and 
timeliness from the early Sichuan earthquake coverage and other emergencies, the 
central government reportedly began allowing local governments to disclose Infor- 
mation about unrest and protests In an apparent attempt to "control the news by 
publicizing the news." 22 However, despite gestures toward broader openness with the 
media, the government clearly did not Intend to relinquish control. 2 * This tactic often 
resulted in the same delivery of "authontatlve" facts, with state news agencies such as 
Xinhua and the People's Dalfy benefiting over commercial media from this selectively 
enhanced coverage. 2 * In February 2009, the official China News Service announced 
that It would create a blacklist of journalists engaged In "unhealthy professional con- 
duct," and those found breaking rules would be prohibited from engaging In news 
reporting and editing work. 24 

Coming off of these perceived triumphs and devastating crises, the Chinese govern- 
ment warned that extra vigilance was needed in 2009. The potential for increased 
social Instability triggered by the global financial crisis Increased anxieties In a year 
already punctuated by powerful anniversaries of events tainting the legacy of the 
CCP, which will also commemorate 60 years since the founding of the People's Repub- 
lic of China: 20 years since the June 4, 1989, Tiananmen Square crackdown; SO years 
since the Tibetan uprising that led to the Dalai Lama’s exile; and ten years since the 
Falun Gong spiritual movement was banned quickly after their 10,000-strong flash 
protest In front of Zhongnanhal, the compound of the Chinese central leadership. 
Thus, officials repeatedly Issued reminders that "stability preservation work" 2 ® would 
be a top priority. At a media forum In January, an official In China’s Internet affairs 
bureau said, "You have to check the channels one by one, the programs one by one, 
the pages one by one — You must not miss any step. You must not leave any 
unchecked comers." 27 Efforts to enforce stability preservation have resulted In predict- 
able crackdowns on media reporting; for example, In March 2009, reporters w'ere 
detained, turned back, or had their recordings confiscated when trying to visit Tibetan 
areas In three provinces ahead of the first anniversary of the unrest In Tibet. 28 



Internet In China 


China leads the world with 298 million Internet users, an increase of 42 percent from 
2007 to the end of 2008. 2 * More astoundlngly, In this same time period more than 90 
percent of these users had broadband access, a spike of over 100 million. 30 China also 
has the world's biggest cell phone market, with some S83.S million subscribers. 31 The 
rural-urban divide that influences many gaps In the Informatization of the national 
economy Is closing, but It remains substantial. Rural areas and the poorer western 
provinces are beginning to gain ground, against a national Internet penetration rate 
of 22.6 percent. 32 At the end of 2008, rural Internet users made up almost a third of 
the entire online population, a jump of over 60 percent.** While many of the poorer 
and western provinces such as Yunnan, Gansu, and Guizhou continue to have pene- 
tration rates of less than 10 percent, they also have considerable growth rates, upward 
of 50 percent. 34 Driven by the policy goal that "every village has access to the tele- 
phone and every township has access to the Internet" by 2010, Infrastructure develop- 
ment has expanded broadband Internet access to 92 percent of townships. 3 ' Gender 
Is also an Important demographic factor in the urban-rural divide, with rural male 
users outnumbering women by IS percent. Internet users between the ages of 10 
and 19 gained ground In 2008, increasing to 35 percent of all users and overtaking 
the 20-29 age group to become the leading demographic using the Internet. 36 

Web sites registered in China are another exponential growth area, Increasing by 
91.4 percent since 2007. 37 Social media platforms continue to take hold: 210 million 
Internet users In China have visited video-sharing sites, S4 percent have blogs (al- 
though only 3S percent of those update them at least once every six months), almost 
a third participate In online discussion forums, and 19 percent belong to social net- 
working sites. 36 Chinese netlzens have access to a wide variety of well-developed Inter- 
net platforms for the domestic market, which have typically outpaced foreign services, 
such as search engines (Baidu’s market share is at 63 percent compared to Google’s 
28 percent), online portals (the top four portals — Sohu, Slna, Tencent, and Net ease — 
claim 73 percent of sector revenue), bulletin board services (BBS) and discussion 
forums, online video sites, blogs, social networking (the service Kalxin has an esti- 
mated 30 million dally users), and booming buslness-to-customer e-commerce. 39 Since 
2006, when only China Netcom and China Telecom were permitted to offer pilot 
commercial VoIP services In selected cities,* 0 the number of VoIP service providers has 
reached 3,000, mainly In Bel)ing and Shanghai, with the number of users reaching 
80 million. 41 

In 2008, China's telecom regulator, the Ministry of Information Industry (Mil), 
was dissolved and Its functions absorbed Into the new Ministry of Industry and 
Information Technology (Mill). 42 In addition to the Mil mandate to regulate 
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telecommunications, Internet, broadband, electronics, computing, and software, the 
MHTs enhanced authority Includes supervision of rr development, formerly held by 
the National Development and Reform Commission. 43 Physical access to the Internet 
Is controlled by the Ml IT and Is provided by eight state-licensed Internet access pro- 
viders (ISPs), each of which has at least one connection to a foreign Internet back- 
bone. 44 China's international outlet bandwidth reached 640 Gbps in 2008, an 
increase of 73.6 percent, but China Telecom (ChlnaNEI) maintained more than SO 
percent of that bandwidth. 44 China Netcom (now China Unicom) lolned China’s sec- 
ond-largest ISP, China 169, after China Telecom split off In 2003 .** 

In an effort to boost the fixed-line phone Industry's competitiveness in the mobile 
market. In 2008 numerous ministries |olntly decided to merge the assets of the nation’s 
six state-owned telecommunication companies and form three groups, announcing a 
plan to Issue licenses for high-speed 3G cell phone services after the restructuring.*' 
As part of the reorganization, China Netcom was fully Incorporated Into China Unicom 
in October 2008, reportedly- completing the biggest merger In Chinese history. 4 * In 
January 2009, the MITT Issued three 3G licenses, with China Unicom and China Tele- 
com receiving licenses for established 3G services and China Mobile authorized to carry 
a Chinese TD-SCDMA service, so far unproven, that has been a priority of research and 
development for the government." 

By sheer scope and range of topics — from online novels to video satires 40 — the Inter- 
net "cannot be Ignored as a battleground for spreading public opinion" and senti- 
ment. 41 Frequently, Incidents that go viral (gaining widespread popularity by virtue 
of being shared on the Internet) are then catapulted Into national prominence, fre- 
quently leading to calls for government action and response. According to Hu Yong, 
a journalism professor, dedicated coverage by online portals, extensive commentary- 
on discussion forms, and the potency of Internet rumors that reverberate back Into 
traditional media are driving convergence in the communications Industry — especially 
in spawning "new media events” that often result in consequences for the officials, 
businesspeople, or celebrities Involved. 42 In an unpublished investigative report 
obtained by David Bandurskl of the China Media Pro»ect, the vice president of People's 
Dally Online said that of the numerous secret Internal reports sent up to the Central 
Party Committee each year, two-thirds of the few hundred reports given priority and 
action by top leaders are from the Internet Office of the State Council Information 
Office. 41 

The rising prominence of collective efforts over the Internet to target and expose per- 
sonal data, 44 known as "human flesh search engines,” appear to serve a voracious 
appetite within the Chinese online community for personal accountability. According 
to Xinhua, the phenomenon had Its origins in 2001, when a man posted a picture of 
a woman he claimed to be his girlfriend on the portal Mop.com, and other Internet 
users Identified her as a model for Microsoft, proving him a liar. 44 They can initiate 
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Investigations as stialghtforwaid as looking for missing relatives, but sometimes stray 
Into questionable acts of vlgllantlsm Involving threats and harassment. In the years 
since, the human flesh search engines have scored a series of successes in Identifying 
corrupt officials who have acted shamefully or abused their office (and are often sub- 
sequently punished), as well as attacking private Individuals engaging In perceived 
distasteful behavior. 46 These loosely networked efforts are capable of launching cam- 
paigns against people like Grace Wang, a Chinese student at Duke University who 
was filmed In Apnl 2008 attempting to referee between two opposing groups of pro- 
testers at a "Free Tibet" action on campus. 4 ' After the video was posted on YouTube 
and other Web sites, the online reaction was swift; she was lambasted In Chlnese- 
language discussion forums and portals for being '‘brainwashed" and a "race traitor," 
among other things, and her parents living In China went Into hiding after threats 
were painted on their apartment. 48 

At times, online activity has tested this relationship between citizens and gov- 
ernment on a range of sensitive Issues. Signed by more than 300 Chinese activists, 
scholars, lawyers, and others, Charter 08 was Issued online on December 9, 2008, as 
a manifesto Inspired by the founding of Charter 77 In Czechoslovakia In 1977. 49 
It called for the protection of human rights, an Independent judiciary, a republican 
system of "one person, one vote," and other comprehensive reforms. 60 Charter 08 
provoked a dear response from authontles, who questioned or detained more 
than 100 of the onglnal signatories, lndudlng Liu Xlaobo, a well-known dissident 
who was detained without process on December 8 and continued (as of May 13, 
2009) to be held at an unknown location. 61 However, through circulation by 
e-mall and other means, Charter 08 had garnered more than 7,000 signatures by early 
2009." 

Beyond the hot-button Incidents that carry news cycles, 64 the interaction between 
top-down media supervisory structures and a more porous and unpredictable online 
sphere have also contnbuted to the rise of a number of phenomena unique to the 
Chinese cybersphere. The so-called Fifty Cent Party, a term referring to an estimated 
280,000 Web commentators nationwide who zealously support the CCP and were Ini- 
tially rumored to net SO cents per post, are directly organized by the government to 
"guide" online public opinion. 68 It had its origins at Nan|lng University In 2005, 
where students were recruited with work-study funds to advocate the party line on an 
online student forum, and It has been Institutionalized to the extent that the Ministry 
of Culture developed Web commentator trainings (complete with exams and fob certi- 
fication) and mafor Web sites are required to have ln-house teams of these govern- 
ment-trained commentators. 64 Thus, while the government continues to aggressively 
Intervene in news media coverage, these Fifty Cent Party members are proliferating 
because the CCP also has come to recognize the potential benefits of a public relations 
approach to online discourse. 
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Legal and Regulatory Frameworks 

Although China’s constitution formally guarantees freedom of expression and pub- 
lication 66 and the protection of human rights, 67 legal and administrative regulations 
ensure that the Chinese Communist Party will be supported in Its attempt at strict su- 
pervision of all forms of online content. The Internet has been targeted for monitoring 
since before It was even commercially available, 6 * and the government seems Intent on 
keeping regulatory pace with Its growth and development. 

Underlying all regulation of the Internet Is a pantheon of proscribed content. 
Citizens are prohibited from disseminating between nine and eleven categories of 
content that appear consistently In most regulations 69 ; all can be considered sub- 
versive and trigger fines, content removal, and criminal liability. 70 Illegal content, 
although broadly and vaguely defined, provides a blueprint of topics the government 
considers sensitive. Including endangering national security and contradicting offi- 
cially accepted political theory, conducting activities In the name of an Illegal civil 
organization, and Inciting Illegal assemblies or gatherings that disturb social order. 71 

Campaigns directed at cracking down on the perceived harmful societal effects of 
Internet development have been both publicly mobilized and opaquely Implemented, 
but the latter are no less of a reality. The severity of Internet content control also fluc- 
tuates dunng different time periods, especially those buflerlng politically sensitive 
events. For example, an official announcement from the General Administration of 
Press and Publications stating that "a healthy and harmonious environment for a 
successful Seventeenth Party Congress” would be encouraged by stamping out "Illegal 
news coverage" and "false news" precipitated a crackdown on political news reporting, 
commentary, and Internet discussion through the close of the Party Congress In Octo- 
ber. 72 In those sensitive months, authorities closed 18,401 "illegal” Web sites and tar- 
geted Internet data centers, the physical computers that private firms rent to offer 
online Interactive features. 73 

On January S, 2009, seven ministries (Including the Ministry of Public Security and 
the Ministry of Culture) were convened by the State Council Information Office (SCIO) 
to discuss selected activities for repalhng the flood of "vulgar' (dlsu) content on the 
Internet that harms the minds and bodies of youth. 74 The crackdown was soon 
extended to Include cell phone messages, online games and novels, videos, and radio 
programs; by January 23, the China Internet Illegal Information Reporting Center 
(C1IRC) had received nearly 19,000 reports of harmful content, leading authorities to 
shut down 1.2S0 Illegal Web sites and to delete more than 3 million items. 76 The tar- 
geting of vulgar and pornographic content also netted some political casualties, nota- 
bly the blog service provider Bullog.cn (Nlubo). founded In 2006 by blogger Luo 
Yonghao. Bullog. which had become an Important platform for liberal-leaning Intel- 
lectuals and political bloggers, was shut down on January 9, 2009, for "picking up 
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haimful Information on political and current affairs." 76 Its closure was linked to Its 
status as the leading domestic circulator of Charter OS, 77 as It had already survived a 
suspension In October 2007 dunng the Seventeenth Communist Party Congress and 
the purging of multiple high-profile blogs. 78 By Apnl 2009, Luo had migrated the site 
as Bulloger.com to a server overseas, which was accessible only by proxy server and 
"unlikely ever to be allowed to exist in China." 79 

In addition to campaigns dedicated to "strict supervision" of online providers in 
order to curb various types of "harmful" information, 80 the government has managed 
to develop a relatively comprehensive strategy for managing online media. Since 2004, 
when essays and articles posted online began to be restricted more systematically, 
government supervision has evolved to rely largely on Informal controls within official 
structures and stringent formal regulation. Nevertheless, It has been a challenge for the 
Chinese government to establish the same level of control over the Internet and online 
media as It has over the traditional media, because of factors including the relative de- 
centralization of government supervision, the scale and viral possibilities of content 
available online, and the greater number of nonstate actors. 

A major development In Chinese cyberspace since 2005 has been the flourishing 
of online news media, which now rank among the top online activities and reached 
234 million Internet users in 2008. 81 Not only do Chinese users cite the Internet as 
their most Important source for Information, more Important than television and 
newspapers, but also the national information clearinghouse on information tech- 
nology, the China Internet Network Information Center, acknowledges that "the 
report(lng) of major events, such as the Olympics, has enabled network[ed] media to 
stand on a par with mainstream media." 8 * Supervision of the media, previously exe- 
cuted primarily by the Propaganda Department of the CCP, has been spilt with the 
SCIO, whose local branches have supervisory responsibility over Internet content. 8 * 
As a result, most ma|or online content providers and portals are registered In Bel|lng 
and are managed by the Beijing Internet Information Administration Bureau under 
the Beijing Information Office. Web sites and content providers have been reported 
to operate with greater or lesser levels of freedom depending on where they are 
registered. 8 * 

Any organization transmitting content electronically about current politics, eco- 
nomic Issues, and other public afialrs must abide by the 2005 Provisions on the Admin- 
istration of Internet News Information Services ("Internet News Regulations").** These 
regulations Introduced a complex regulatory scheme with the result that only news 
originating from state-supervised news outlets could be posted online. Government- 
licensed and authorized news agencies are limited to covering specific subjects 
approved by the state, 86 but at least are allowed to conduct original reporting on "cur- 
rent events news information," defined as "reporting and commentary relating to 
politics, economics, military afialrs, foreign afialrs, and social and public afialrs, as 
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well as repotting and commentary relating to fast-breaking social events/’” 7 All Web 
sites that are nongovernmental entitles, or otherwise not licensed news agencies, are 
restricted from performing any journalistic function, limiting them to reprinting 
content from central news outlets or media under the direct control of provincial 
governments. 8 ” In practice, major portals are not permitted to repost many articles 
published by print media online. 

To discipline media, government mlnlstnes and Communist Party organs use both 
formal controls, such as policies and instructions and defamation liability, and Infor- 
mal mechanisms, Including editorial responsibility for content, economic Incentives, 
Intimidation, and other forms of pressure. 89 Generally, authorities prefer to Issue 
Instructions advising on topics to be censored Informally by means of short message 
service (SMS), chat, or e-mall, or at regular meetings with editors. Coverage of politi- 
cally sensitive events Is zealously managed at every stage in order to reduce the risk of 
exposure to the smallest possible degree. 90 Tills management Includes prior bans on 
publication and time limits for obeying Instructions, as well as "guidance" that serves 
a more propagandists function. Including Instructions on whether to place news, 
when to place news, where to place It, and In what form It should be publicized. 
When "mass Incidents" or major events such as the 2008 Olympic Games reach their 
conclusion, the grasp loosens over time, but It remains an unrelenting presence. 

Despite the challenges and intense resources required to efiectlvely police online 
media, many of these formal and informal controls have nevertheless been extended 
to Chinese cyberspace. China’s legal framework for Internet access and usage Is 
achieved by the participation of state and nonstate actors at all institutional levels. 91 
Control over Internet expression and content is multilayered and achieved by dis- 
tributing criminal and financial liability, licensing and registration requirements, 
and self-monltorlng Instructions to nonstate actors at every stage of access, from the 
ISP to the content provider and the end user. Some of these blunt and frequently 
applied methods include |ob dismissals; the closure of Web sites, often by their Web 
hosting service, for a broad array of Infractions 92 ; and the detention of journalists, 
writers, and activists. In 2008, 49 Individuals were known to be Imprisoned for online 
activities, 95 Including several (such as Huang Ql and Du Daobln) serving their second 
period of detention for Internet-related crimes. 9 * Internet users have also been targeted 
for posting photographs and other multimedia online. 98 For example, journalist 
Ql Chonghual was questioned by police about an artlde he cowrote about a corrupt 
local official and photographs of a luxurious government office building on the anti- 
corruption online forum of the Xinhua News Agency, before being sentenced to 
four years Imprisonment on fraud and extortion charges. 96 Schoolteacher Liu 
Shaokun was detained on June 2S, 2008, and sentenced to one year of “reeducation 
through labor" for posting pictures of school buildings that collapsed In the Sichuan 
earthquake. 97 
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Internet content providers, such as BBS and other user-generated sites, are directly 
responsible for what Is published on their services. 96 All services providing Internet 
users with Information that fall sufficiently to monitor their Web sites and report vio- 
lations, or that produce, publish, or distribute harmful Information, face fines and 
other serious consequences. Including shutdown, criminal liability, and license revoca- 
tion.” The government has used this approach to bring social media like video-sharing 
sites In line with the larger governing framework for Internet content regulation. The 
Provisions on the Management of Internet Audio and Video Programming Services 
(“Video Regulations''), effective January 1, 2008, were a further refinement of the 
government's attempt to create a sustainable "walled garden" of self-policed local- 
language content for the Chinese cybersphere. lco Jointly Issued by the broadcast media 
regulator the State Administration of Radio, Film, and Television (SARFT) and the Mil. 
the regulations require video service providers that produce their own content to 
obtain both a broadcast production license and rarely Issued Internet news Infor- 
mation services licenses, which are regulated by the Mil, 101 thus carrying forward the 
model introduced In the Internet News Regulations. Just as unlicensed service pro- 
viders may not upload or transmit content for anyone, they are also prohibited from 
allowing any Individuals to upload content pertaining to "current events" news. 10 * 

In addition to the types of Illegal content routinely proscribed In Internet regula- 
tions, SARFT Issued a notice on March 30, 2009, detailing 21 unusually specific and 
wide-ranging additional content categories that online video providers should edit or 
delete. 10 * These Include distortions of Chinese culture and history; disparaging depic- 
tions of revolutionary leaders, heroes, police, army, or Judiciary; depictions of torture; 
mocking depictions of catastrophe, including ma|or natural disasters; excessively 
frightening Images and sound effects; and "sexually suggestive or provocative content 
that leads to sexual thoughts." 104 The notice also mandates providers to Improve their 
content administration systems by hinng personnel to review and filter content, espe- 
cially online music videos and other video entertainment, original content, and even 
netlzen reporters Ipalke )."* 

For the first time, individuals are singled out In the Video Regulations, so that "pri- 
mary Investors" and "managers" can be fined up to RMB 20,000 or barred from engag- 
ing In similar services for five years for violations such as not sufficiently policing 
content or changing shareholders without going through specified procedures. 106 

Implementation of these regulations has been uneven, a trademark of many laws In 
China. A significant degree of uncertainty was also created by the Inaugural require- 
ment that online video service providers be either wholly state owned (as defined in 
Article 6S of the 200S Company Law) or entitles where the state holds the controlling 
interest, until the government clarified In February 2008 that this provision did not 
apply to already established Web sites. 107 Initially, 2 5 video-sharing portals were 
shut down (including S6.com), and another 32 video-sharing Web sites Including 
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Tudou.com — China's largest video-sharing portal — were warned for hosting improper 
material In March 2008. 10 * The thlrd-largest Chinese video-sharing site, S6.com, went 
off-line mysteriously in June 2008 for more than a month, 11 ” and Youku.com received 
a license from SARFT In July 2008."° 

Technical filtering associated with the so<alled Great Firewall of China Is only one 
tool of Informal control applied in China. For example, to manage the explosion of 
the Chinese blogosphere, which reached 162 million blogs at the end of 2008," 1 blog 
service providers must not only Install filters that do not allow the posting of po- 
tentially thousands of keyword combinations, but also flag certain posts for reslew. 
Comment sections, forums, and other interactive features that pose a higher risk of 
containing sensitive content can be shut off, while posts can be deleted or concealed 
by the provider so that only the author can see them." 2 Bloggers who are considered 
to have written too many troublesome posts can have their accounts canceled at will. 

The unfolding of one mass Incident presents a crucial case study on the range of 
online and media strategies to gather and communicate Information, as well as govern- 
ment attempts to manage them. On June 22, 2008, the body of middle school student 
11 Shufen was found In the Xlmen River In Weng’an county, Guizhou province." 3 Al- 
though authorities declared her death to be caused by accidental drowning, her family 
believed that she was a victim of a crime and pressed for an Investigation. Rumors cir- 
culated that relatives of the country party secretary and police chief were among the 
people LI was with on the night of her death, one of whom said she lumped suddenly 
while he was doing push-ups." 4 In less than a week, the furor had grown so much that 
a group of hundreds of marchers heading toward government offices morphed Into a 
crowd of up to 30,000 rioters, who surrounded a police headquarters and set fire to 
buildings and police vehicles." 4 For a week, local officials were silent, and only one 
piece of news was released by the official Xinhua News Agency, describing protesters 
as "some people who did not know about the exact context of what had hap- 
pened.""* In contrast to the silence of state-run media, numerous photos and video 
dips of the noting appeared Immediately' on blogs and various online forums such as 
Tlanya and the People's Dally Strong China forum, while unconfirmed and conflicting 
stodes about the girl's death were drculated on the Internet." 2 Angry netlzens and 
Web site moderators dueled vigorously, with users posting In increasingly oblique 
and creative ways and Web sites aggressively deleting and blocking Information about 
the incident. 1111 Furthermore, although hundreds of video dips appeared on YouTUbe. 
Chinese users could not access certain videos about the lnddent. and none appeared 
on two of biggest China's domestic video-sharing sites, TUdou.com and Uume.com. 119 
Soon after, state-run media began Increasingly to report news and official announce- 
ments regarding the Weng'an riot on Chinese news sites, but without allowing 
Internet users to leave comments. Other media attempting to cover the story were 
compelled to apply for spedal press passes In order to secure Interviews, which were 
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then attended by local officials. 120 By eaiiy July, state media weie providing updates 
on the girl's cause of death and confirming that four officials had been fired as a result 
of the incident. 121 

At the same time, because these compulsory control mechanisms are actually imple- 
mented through Informal processes, provider-based content control Is neither narrow 
nor entirely predictable. A study of Chinese blog service providers demonstrated that 
there Is substantial s'artatlon In censorship methods, the amount of content censored, 
and providers’ transparency about deleting or depublishing content. 122 Similar find- 
ings were reached In a Citizen Lab study of four popular search engines In China, 
which found significant variations In the level of transparency about filtering, actual 
content censored, and methods used, suggesting that there Is not a comprehensive sys- 
tem for determining censored content. 121 While Google and Microsoft, which are 
hosted outside China, actually delisted certain search results, the two search engines 
hosted inside China, Yahoo and Baidu, ran their Web crawlers behind China’s filtering 
system, and therefore did not Index Web sites already blocked by the Chinese govern- 
ment. Although Google censored considerably less than the other search engines. It 
also has a practice of prioritizing authorized local content, which researcher Nart Vllle- 
neuve found amplified the significance of the censored Web sites, as they were the 
only ones to offer differing viewpoints. 12 * Indeed, the complexity of these Informal 
control mechanisms was further revealed In Apnl 2009, when an employee of China's 
leading search engine, Baidu, leaked a folder containing the substance and flow of in- 
ternal censorship. I2S These Included lists of topics, keywords, and URLs to be blocked, 
lists of banned forums, employee guidelines for monitoring work, censorship guide- 
lines for the popular Baidu post bars, and guidelines of how to search for Information 
that needed to be banned.' 26 

The government’s filtering practices can cause considerable anger among China's 
Internet users, especially when entire platforms or tools such as RSS feed sites or 
Twitter are blocked.' 22 The uses of social media form the building blocks for what 
blogger Isaac Mao calls sharlsm, where the "co-computing of people, networks, and 
machines" forms a networked pipeline system to spread Information In the face of 
Internet crackdowns. 1 " 1 

Because of a wide range of factors — from economic Incentives and demographic 
factors of the online community to the dragnet of legal liability — the impact of self- 
censorship Is likely enormous and increasingly public. If difficult to measure. Further- 
more, the efforts of industry organizations at self-dlsdpllne are not entirely removed 
from government oversight. In promoting "Internet cooperation," officials place self- 
dlsclpllne hand-ln-hand with admonitions to abide by Chinese laws. 12 * The Cl IRC 
encourages the reporting of "Illegal" or "harmful" Information and Is sponsored by 
the Internet Society of China, formally registered as a civil society organization.' 10 Yet 
the C11RC cited Baidu and Google's Web and Image search engines for returning a large 
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number of obscene and pornographic links as pari of an announced official crackdown 
on obscene and pornographic content In January 2009. Google and Baidu were among 
a total of 19 Web sites singled out for harmful, vulgar content available to minors, 
including Slna.com, Sohu.com, Wangyl, and Tlanya. 131 

The Chinese constitution protects people's nght to criticize and make suggestions 
to any state organ. 132 However, a few cases of alleged online defamation publicized 
In Spring 2009 exemplify how the Internet Is Illuminating some of the complexities 
of influence and power In the relationships between media, different levels of govern- 
ment, and citizens seeking justice. 

Land requisitions for commercial development by local governments In China, 
where farmers are often Inadequately compensated for land and suffer significant losses 
In income, are a common problem of poor governance and an Inadequate legal sys- 
tem. 133 After petitions and other attempts to protect concerned farmers' legal rights 
had failed, Wu Baoquan and Wang Shual were detained for their online criticism of 
local government land seizures. 134 In 2007, Wu Baoquan had posted Information and 
conducted his own Investigation about a land requisition in Ordos, Inner Mongolia, 
where officials forced residents ofl their land In order to sell It to developers, earning 
exorbitant profits while paying compensation well below market rates to the farm- 
ers. 134 Wu was tried twice for criminal defamation and ultimately his sentence was 
Increased to two years, although the same court that affirmed his conviction decided 
to review his case in April 2009. 136 

Wang Shual was the author of a satincal blog post suggesting officials from his 
hometown, Llngbao city In Henan province, had misappropriated funds for combating 
drought by carrying out policies that actually encouraged drought In order to drive 
down land values and |ustlfy paying farmers less compensation for requisitioning their 
land. 137 He was detained In Shanghai by Llngbao officials on March 6, 2009, and 
released on ball only after he signed a written confession and his family agreed to cut 
down their fruit trees, reducing the compensation they would receive for their land. 134 
As Is often the case. It took media attention, this time through a story In a national 
newspaper, the China Youth Dally, to spark the online public scrutiny that would influ- 
ence the outcome of Wu's case. In this Instance, higher party officials Issued an apol- 
ogy (from the Henan province chief of public security), compensated Wang for his 
eight days In detention, and fired the local party secretary and punished three others 
responsible for the unauthorized land requisition as well as demolishing crops and 
buildings before compensation was paid. 139 

Neither Wang nor Wu was a journalist using a professional platform to disseminate 
Information, but media were In large part responsible for exponentially expanding 
public awareness and discourse on their detention and the problems underpinning 
their cases. 
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The hist litigation to be launched over human flesh search engines also tested how 
Internet libel would be dealt with under Chinese law. A Beijing woman named Jiang 
Yan had committed suicide In December 2007, months after learning about her hus- 
band Wang Fel's infidelity. I *° According to her Instructions, posts from the blog diary 
she left recounting her ordeal were published posthumously by major Web portals, and 
Wang's anonymous human flesh search engine critics went to work publishing her 
husband's name, address, and other personal details. 141 In March 2008, after he was 
publicly condemned, harassed, and fired from his job, Wang sued the classmate of his 
wife who had posted her blog on his Web site and the portals Daql.com and Tlanya. In 
December, after convening a rare panel of 54 judges, a Beijing court ruled in Wang's 
favor, finding that the classmate and Daql violated Wang's rights of privacy and repu- 
tation, ordering them to pay a total of almost USD 1,200 in damages for emotional dis- 
tress, remove the posts, and apologize. 1 * 2 However, since Wang admitted to his 
Infidelity, the court did not find that Wang had been slandered. It also exonerated 
Tlanya, which had acted "appropriately" by deleting a user post containing Wang's 
personal information upon his request. 145 Interestingly, after Issuing Its judgment the 
Bel|lng district court held a press conference to recommend that the MUT use technol- 
ogy to monitor Internet speech and prevent similar Infringements. 1 ** 

While one legal scholar argued that the Chinese legal system “weighs privacy pretty 
heavily against free speech, even when the speech Is truthful," 145 the relatively low 
fine may not act as quite as strong a deterrent as plaintiffs like Wang may desire. How- 
ever, the legal system has become Increasingly responsive to those who feel victimized 
by the human flesh search engines, especially corrupt officials. In March 2009, the 
Standing Committee of the National People's Congress approved an amendment to 
the Criminal Law that would punish government and corporate employees with access 
to personal data who Illegally obtain, sell, or leak such information, while Xuzhou city 
In Jiangsu province became the first jurisdiction to prohibit the dissemination of 
others’ personal information on the Internet. 14 * 

Surveillance 

The government has continued to refine Internet surveillance mechanisms to closely 
track Individuals' online activities. '*' In November 2006, the Ministry of Public Secu- 
rity announced the completion of the essential tasks of constructing the first stage of Its 
"Golden Shield" project, which Is a digital national surveillance network with almost 
complete coverage across public security units nationwide. 14 * Despite the vagueness 
of public pronouncements on the Implementation of the Golden Shield, the surveil- 
lance efforts of local governments, as well as organizations delegated responsibility for 
surveillance such as schools and ICPs, are dearly becoming more sophisticated. Since 
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2006, local governments have been developing "Safe City" surveillance and communi- 
cations networks that connect police stations, through IP video surveillance, security 
cameras, and back-end data management facilities, to specific locations Including 
Internet cafes, financial centers, and entertainment areas. 1 * 9 Private firms known as 
"censorship entrepreneurs” have also lumped Into the fray, providing advanced text- 
mining solutions to enable censors to monitor, forecast, and "manage" online public 
opinion, thereby avoiding scandalous and damaging revelations such as the Internet 
post in June 2007 that exposed how children were kidnapped and forced Into 
slave labor at illegal brick kilns in Shanxi province. 1 * 0 One company featured by 
international media, TRS Information Technology, claims to be the "leading search 
and content management technology and software provider In China," serving over 
90 percent of the State Council ministries, SO percent of newspaper press groups, and 
300 universities and colleges.'** Although TRS disclosed that Its high-end surveillance 
systems had been generally adopted by police — specifically that the company had 
Installed data-mlnlng systems at eight Shanghai police stations so that one Internet 
police officer could now do the work of ten— TRS does not list the Ministry of Public 
Security as one of Its customers. 1SZ 

Chinese law offers few viable protections for Individual privacy, although clauses In 
most Internet laws and regulations technically provide for the confidentiality of user 
Information. The exceptions, however, are more important. For example, regulations 
on the management of e-mall services provide that e-mall service providers are duty- 
bound to keep personal information and e-mail addresses of users confidential, and 
may not disclose them except with user consent or when authorized for national secu- 
rity reasons or criminal investigations according to procedures stipulated by law.'** 
Most Internet regulations allow for disclosure of user Information when required by 
law, for reasons Involving national security, and for criminal Investigations, but do 
not specify what formal procedures are required or what evidentiary standards must 
be met for the disclosure of Information. In practice, as has been demonstrated In a 
number of cases,'** all ISPs and ICPs not only must capitulate to Chinese government 
demands for censoring content, but also are required to assist the government In mon- 
itoring Internet users and recording their online activities. Requests to turn over per- 
sonal data are often Informal or provide little detail, and providers have no discretion 
to refuse turning over Information to public security officials.'** 

Real-Name Registration 

Registration requirements are often the first step to monitoring citizens' online activ- 
ities. Although this rule Is not enforced, new subscribers to ISPs have been expected to 
register with their local police bureaus since 1996. ,s * In March 200S, as part of a CCP 
campaign to exercise tighter control over culture, education, and media, all university 
BBSs were ordered to block off -campus users and require users to reregister with their 
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personal Identifying Information when going online, eliminating online anonym- 
ity. 157 The city of Hangzhou was slated to become the first In China to require real- 
name Web registration for users to participate In local chat rooms or online forums, 
but these regulations were put on hold in May 2009. 158 The momentum for real- 
name systems might be stronger with cell phones, however. In January 2009, Bel|lng 
Mobile announced that It would begin requiring customers to show Identification 
when purchasing Its Easyown prepaid SIM cards (which amount to 70 percent of the 
customers on China Mobile, the nation's largest carrier) and limit purchases to three 
per person. 159 

Data Retention 

In China, ISPs and ICPs must fulfill data retention obligations. Internet service pro- 
viders are required to record important data (such as Identification, URLs visited, 
length of visit, and activities) about all of their users for at least 60 days and to ensure 
that no Illegal content Is being hosted on their servers. 160 While 78 percent of users in 
China connect from home, 42 percent of users also use Internet caffe as a main access 
location. 161 However, since 2002, Internet caffe have been heavily regulated: all caffe 
are required to install filtering software, ban minors from entering, monitor the activ- 
ities of their users, and record every user’s Identity and complete session logs for up to 
60 days. 162 In many cities, they are also connected by live video feed to local police 
stations. The providers of electronic bulletin services. Including bulletin board services, 
online discussion forums, chat rooms, and so on, are required to monitor the contents 
of information released In their service system, time of release, and URL or domain 
name, and to keep It for 60 days. 16 * 

Owned by Tencent, QQ Is China’s most popular Instant messenger. This service was 
found to have Installed a keyword-blocking program In Its client software to monitor 
and record users’ online communication, offering it to the police If required. 16 * 

Filtering and surveillance are often complementary processes, especially when ISPs 
and ICPs that are liable for the activities of their users delegate human monitors to 
monitor and flag content for further review or deletion. Online communications by 
e-mail and Instant messaging (such as QQ and Skype) are also examined and moni- 
tored by the government. 165 In October 2008, a joint report by the Information War- 
fare Monitor and ONI Asia provided a chilling example of the possibilities for 
surveillance conducted by nonstate actors on a massive scale. 166 The Chinese-marketed 
TOM-Skype, a version of the VoIP and chatting software Skype, kept more than a 
million user records In seven types of log files. Including IP addresses, user names, and 
time and date stamps In all the log files that could be decrypted. All these log files, 
along with the Information required to decrypt them, were kept on publicly accessible 
servers. For call Information logs dating from August 2007, the user name and phone 
number of the recipient were also logged, while content filter logs dating from August 
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2008 also contained full texts of chat messages (which themselves contained sensi- 
tive Information such as e-mail addresses, passwords, and bank card numbers). Of 
the eight TOM-Skype surveillance servers traced by Nart Vllleneuve, one server hosted 
a special version designed for use In Internet cafes and contained log files and the 
censored keyword list, while another contained logs for TOM Online’s wireless 
services. 

The TOM-Skype surveillance system was triggered when a TOM-Skype user sent or 
received messages containing a banned keyword listed in a key file, and those messages 
were then stored In log files on a TOM-Skype server. Within the content of these 
messages stored In the file logs, when filtered out to eliminate English language 
obscenities, almost 16 percent contained the word ’’communist," 7 percent the word 
"Falun,' 1 and 2.S percent "Taiwan Independence.” However, the logged messages also 
made reference to other content outside the range of these long-sensitive topics, such 
as earthquakes and milk powder. 167 

Furthermore, the data also contained personal Information of Skype users that inter- 
acted with TOM-Skype users. Users who attempt to access www.skype.com from China 
are redirected to skype.tom.com. While Skype claimed that TOM fixed the security 
breaches within 24 hours of the report's publication, 166 the report Issued a warning 
for ’’groups engaging In political activism or promoting the use of censorship circum- 
vention technology accessed through services provided by companies that have com- 
promised on human rights." From the information contained In the log files, it would 
be possible to conduct politically motivated surveillance by using simple social net- 
working tools to Identify the relationships between users. 

like all other ICPs, most bulletin boards and chat rooms assign personnel to monitor 
the content of messages. 169 Messages submitted by users are censored by human cen- 
sors and filtering systems before appearing online. 1 70 In order to enhance the surveil- 
lance on bulletin board systems, since 2005 the users of campus bulletin boards have 
been mandated to reregister with their real Identifying Information before posting mes- 
sages online. 171 

In recent years, serious concerns have been raised about the ability of the Chinese 
government to spy on the country's 624 million cell phone subscribers: in 2008, one 
Chinese state-run cell phone company revealed that It had unlimited access to the 
personal data of their customers and hands the data over to Chinese security officials 
upon request. 17 * Since 2004, the Chinese government has been drafting legislation to 
regulate personal mobile phone communication, which would require all cell phone 
subscribers to register for mobile phone service with their real name and Identification 
card. 175 In addition, Chinese police have Installed filtering and surveillance systems for 
mobile and SMS providers to block and monitor "harmful" short-message communica- 
tions. 17 * Anyone who distributes "harmful" messages or rumors using SMS on mobile 
phones can be arrested and convicted. 175 
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Cyber Attacks 

In 2008, organizations advocating lor human rights In Tibet and China experienced 
escalated cyber attacks dunng politically explosive events, such as the crackdown on 
Tibetan protesters in March, and In the lead-up to the Olympic Games In August. The 
preferred method of these attackers was reportedly e-mall druses, which are more 
likely to be undetected by commercial antivirus software because they are hand- 
crafted. 176 From field research conducted at the otfices of the Tibetan Government in 
exile In Dharamsala and several Tibetan missions abroad, researchers at the Sec Dev 
Group and the Citizen Lab at the University of Toronto discovered an extensive 
malware-based cyber -espionage network that also used "contextually relevant e-mails" 
to gain "complete, real-time" control of at least 1,295 Infected computers In 103 coun- 
tries. >'7 This network, which they called GhostNet. sent e-malls to specific targets con- 
taining a Trojan called GhOst RAT, which In taking full control of Infected computers 
allowed GhostNet to search and download specific files and covertly operate attached 
devices such as microphones and Web cameras. Among the high-value infections, 
comprising close to 30 percent of the computers affected, were many foreign affairs 
ministries, embassies, regional organizations (such as the ASEAN Secretariat), and 
news organizations. Although the complicity or awareness of Chinese authorities could 
not be conclusively established, researchers tracked the Instances of GhOst RAT to com- 
mercial Internet access accounts located on the Island of Hainan In China. 

ONI Testing Results 

The “Great Firewall of China" uses a variety of overlapping techniques for blocking 
content containing a wide range of material considered politically sensitive by the 
Chinese government. While China employs filtering techniques used by many other 
countries. Including domain name system (DNS) tampering and Internet protocol (IP) 
blocking, It Is unique In the world for Its system of filtration, targeting Internet connec- 
tions when triggered by a fist of banned keywords. Known as a TCP reset, this content 
filtering by keyword targets content regardless of where It Is hosted. 

Reset filtering using TCP Is based on Inspecting the content of IP packets for key- 
words that would trigger blocking, either In the header or the content of the mes- 
sage. When a router in the Great Firewall Identifies a bad keyword. It sends reset 
packets to both the source and destination IP addresses In the packet, breaking the 
connection. 

China employs targeted yet extensive filtering of Information that could have a 
potential Impact on the Communist Party's control over social stability, and Is there- 
fore predominantly focused on Chlnese-language content relating to China-specific 
Issues. For the government, Information constituting a threat to public order extends 
well beyond well-publicized sensitive topics, such as the June 1989 military crackdown. 



the Tibetan nghts movement, and the Falun Gong spiritual organization (all of which 
are methodically blocked), and Includes Independent media and dissenting voices, as 
well as content on human rights, political reform, sovereignty Issues, and circumven- 
tion tools. 

Filtering during the 2008 Olympic Games 

The OpenNet Initiative monitored a short list of prominent blogs, Chlnese-language 
and International news sites, advocacy organizations, and social media platforms con- 
tinuously from late July to mid-September 2008. This period generally marked one of 
the most significant openings In access to Information since ONI began monltonng 
Internet filtering In China in 2004, but the foundations of censorship based on control 
over domestic media and civil society remained. 

In 2001, China Issued this decree in Its official bid for the 2008 Olympic Games: 
"There will be no restrictions on journalists In reporting on the Olympic Games." 17 * 
This promise was significantly compromised, not only In China's purported long-term 
attempt to build a more open and transparent media system, 179 but also In the lack of 
transparency over Its policy on access to online Information. 

At a press conference on July 28, the media director of the Bel|lng Olympic Commit- 
tee responded to a Wall Street lountal reporter who physically displayed the filtering of 
certain Web sites on his laptop by denying anything was amiss. ISU This time, a Chinese 
Foreign Ministry spokesperson laid part of the blame with the Web sites themselves, 
claiming they have problems making them "not easy to view in China." 1 * 1 Yet. three 
days later, on July 31, the IOC admitted to accepting a deal with the Chinese govern- 
ment In which sensitive Web sites that were "not considered Games-related" would be 
blocked. 183 

During the Olympics, access was partitioned between the Olympics Main Press Cen- 
ter (MFC) in the Olympic Green and the Bel|lng International Media Center, the main 
press venue for non-IOC-accredited journalists. 1 ** The ONI compared data from the 
Olympics MPC to that from other locations In Bel|lng, compiling a snapshot of Inter- 
net filtering In China leading up to the Olympics. Testing conducted by the ONI at the 
Olympics MPC confirmed that filtenng of Internet content continued even for mem- 
bers of the foreign press through TCP reset keyword blocking and IP address blocking, 
the latter accounting for the vast majority of filtering at the MPC. For each test at the 
MPC, the ONI tested at other locations In Bel|lng with broadband Internet access pro- 
sided by China Netcom. Throughout this time pehod, filtering was nearly identical 
between the MPC and consumer-les’el access on China Netcom and China Telecom, 
Indicating that the Incrementally Increased openness was Implemented nationally. 

Many sites that are routinely blocked by the Chinese gos'emment for containing po- 
litically sensitive content remained accessible from August 1 to at least mid-September 
2008, including the Web sites of human rights organizations and forelgn-hosted 
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Chlnese-language news sites. Overseas news organizations such as the World lournal 
and the BBC News Chinese Web site were the main beneficiaries of China's Olympic 
guarantees. 

Even though the IOC acknowledged on July 31 that filtering would continue to take 
place, a number of Web sites blocked at the MPC on July 25 were accessible a week 
later. Including Amnesty International, Chlnese-language Wikipedia (zh.wllapedla.org), 
and an Increased swath of independent media Including Taiwan's Liberty Times, the 
Hong Kong-based Apple Dally newspaper. Voice of America news, and Radio Free Asia 
(www.rfa.org) and Its Chinese Web site. 

However, RFA's Tibetan- and Uyghur-language Web sites became Inaccessible again 
around August 20. Although Flickr remained accessible throughout the testing period, 
two of Its photo servers were filtered until mid-August. Most of the sites unblocked for 
the Olympics remained accessible until at least mid-September 2008 on China Netcom, 
although a few (including Amnesty International) were again blocked on China Tele- 
com by September IS. 

At the same time, the ONI found that the sites being filtered frequently address 
tumultuous and controversial changes wrought in preparation for the games, from 
crackdowns on civil society to the transformation of a capital city and other social 
upheavals. Thus, the majority of advocacy sites and politically "sensitive'' organizations 
remained blocked, sweeping across a broad range of Issues from citizen journalism 
(www.zuola.com) to the Three Gorges Probe, as well as nearly all of the Tibetan exile 
ads'ocacy groups. Groups staunchly critical of Chinese government policy, Including 
the press freedom groups Reporters Without Borders and Freedom House, continued 
to be blocked. The status of certain news sites. Including the China Digital Times Inter- 
net news and Information clearinghouse and Boxun.com, a dissident news Web site 
that Chinese government officials reportedly look to as a source of Internal news, 
remained unchanged. Furthermore, the accessibility of any Web site does not guaran- 
tee that content on that site will be as'allable, as China's practice of filtenng keywords 
through a TCP reset appears as robust as ever. 

On December 19, 2008, the Web site of the New Yotk Times was reported blocked 
even as restrictions were lifted on the Chlnese-language Web sites of the BBC. Voice 
of America, and Asiaweek, which had been blocked earlier that week. 18 * 

In addition to testing dunng the Olympics period, the ONI also conducted testing In 
late 2008 on two backbone providers, the state-owned telecoms China Unicom (CU), 
formerly China Netcom, and China Telecom (Cl), which between them provide cover- 
age nationwide. Because both control access to an international gateway, URL filtering 
and domain name system (DNS) tampering implemented by CU and CT affect all users 
of the network regardless of ISP. 

Nearly all the DNS tampering was executed by CU, while CT blocked a number of 
human fights organizations, pornographic sites, and one Hong Kong-based publisher 



(mlnorbooks.com) using this method China Unicom also used IP blocking lo filler 
nearly 400 IP addresses. These conelaled closely with sites blocked on Cl through a 
method obscured to analysis. In which users were presented with an enor page Inform- 
ing the user that a network enor occurred while accessing the Web site. While the error 
page can appear In the case of legitimate network errors, the repeated appearance of 
the enor page Indicates blocking Is taking [dace. China Telecom also used a squid 
proxy to block a handful of Web sites. Including several Fllckr photo servers. While 
the two backbone providers showed less overlap In filtering methods when compared 
with 2006-2007, there continued to be almost complete conelatlon in blocking be- 
tween CU and CT. 

At time of testing, most International social media platforms were accessible. Includ- 
ing Fllckr, Blogspot, Wordpress. Facebook, and Twitter. In contrast to 2006-2007, 
when all Individual Blogspot blogs tested were accessible on China Netcom and 
blocked or Inaccessible on China Telecom. In 2008 CU and CT blocked nearly all of 
the same Individual Blogspot blogs tested. Technorad condnued to be blocked. 

In late 2008, China had resumed blocking many Web sites that were blocked In 
2006-2007 and made accessible during at least part of the Olympics period. These 
included the independent overseas news sites <77ie Liberty Times ) and Radio Free Asia's 
main Web site and Its Mandarin-, Uyghui-, and Tlbetan-language sites. However, In 
contrast to 2006-2007, some of these Web sites were unreliably or intermittently 
accessible during December 2008 testing, possibly as a result of the TCP reset filtenng 
method used. Sites blocked using the TCP reset included YouTube, Chinese- language 
Wikipedia, and BBC News. 

A few sites that were accessible In 2006-2007 had been blocked by 2008 testing, 
most notably Wikipedia (en.wlklpedla.org). The site Wlklleaks (www.wiklleaks.org) 
was also blocked by both ISPs In 2008 testing. 

The greatest variations In filtenng patterns between 2006-2007 and 2008 occurred 
with Chine se-language news media Web sites, likely In continuity from the Olympics. 
As In 2006-2007, few International news organizations were filtered, and some for- 
merly blocked (e.g.. Voice of Amenca news) were accessible. Notably, some prominent 
Chlnese-language media blocked in 2006-2007 were accessible In 2008, Including the 
World Journal, www.slngtao.com, and the Apple Daily. However, a significant number 
of Independent media representing different points on the political spectrum con- 
tinued to be filtered. 

In 2006-2007 and 2008, China filtered a significant portion of content specific to Its 
own human rights record and practices. As such, only a few gtobal human rights sites 
with a global scope continued to be filtered. Including Human Rights and Freedom 
House. Article 19 and Human Rights First were no longer blocked in 2008, and filtenng 
on Amnesty International was renewed after a hiatus dunng the Olympics penod. A 
typical example of this targeting of China-related content is the differential treatment 
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of two related organizations: while the Web site for the writers' association PEN Amer- 
ican Center hosted content on the |alled dissident and Charter 08 coauthor Liu 
Xlaobo, It was accessible (www.pen.org) at the same time that the Chinese PEN Center 
(www.chlnesepen.org), a site with both English and Chinese content, was blocked 
by both ISPs. The sites of watchdogs on Chinese rights defenders and labor rights con- 
tinued to be blocked, as did a substantial number of rights organizations based In Hong 
Kong. 

Certain targets for blocking continued to cut across political and social lines of con- 
flict In 2008. The consistent flltenng of Web sites supporting greater autonomy and 
rights protection for the Uyghur (svww.uyghurctMigress.org), Tibetan, and Mongolian 
(www.lnnermongolla.org) ethnic minorities Is not surprising, as these Issues have al- 
ready been excluded from official discourse Inside China. Nearly all the overseas Tibe- 
tan organizations, which conduct activities ranging from nesvs broadcasting for the 
Tibetan community to the Tibetan Youth Congress, which lobbies for full indepen- 
dence for Tibet, have been blocked. China also continued to block a substantial num- 
ber of sites on religion. Including the International Coalition for Religious Freedom, 
Catholic organizations, and sites on Islam in Arabic, Including those presenting ex- 
tremist viewpoints (www.alumah.com). 

In 2008, China continued to filter a significant number of sites presenting alternative 
or additional perspectives on its policies toward Taiwan and North Korea. For example, 
the Democratic Progressive Party (DPP) of Taiwan (www.dpp.org.tw) Is continually fil- 
tered. However, a number of sites with no political content but ending with the do- 
main ".tw" were blocked, and Greenpeace Taiwan was the only country Web site of 
the organization blocked by both ISPs. 

As in 2006-2007, the ma|or exceptions to the focus on politically sensitive topics 
specific to China In 2008 were circumvention tools and pornography. A portion, 
though not a majority, of proxy tools and anonymizers In both the Chinese (garden- 
networks.com) and English (www.peacefire.org) languages were blocked. The circum- 
vention tool Pslphon was also blocked, along with the Web sites of the Citizen Lab at 
the University of Toronto and the Information Warfare Monitor, sister Institutions 
engaging In research on circumvention and surveillance. Both ISPs also blocked a sub- 
stantial amount of pornographic content. 

Although the scope of Internet filtering In China extends far beyond the highly 
sensitive Issues known as the "three Ts: Tibet, Tiananmen, and Taiwan," the continued 
potency of these subjects evidently prompted the Chinese government to step up 
filtering of leading international Web sites and social media platforms in 2009. On 
March 24, 2009, Google officially confirmed that YouTube was blocked In China; traffic 
dropped steeply on the evening of March 23 to "near zero” by March 24. ,Si The Web 
site www.herdlct.org also captured accounts providing evidence of a previous reported 
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block of YouTube beginning on March 4, coinciding with the one-year anniversary 
of the crackdown on protests In Tibetan regions (during which YouTube was also 
reported blocked In March 2008) as well as the SOth anniversary of the Tibetan upris- 
ing of 1959. Blogspot became inaccessible around May 9,'“ and on June 2, two days 
before the 20th anniversary of the June 4 military crackdown, Fllckr, Twitter, hve.com, 
and Hotmail were blocked In rapid succession. 187 

In May 2009, the Ministry of Industry and Information Technology in China sent a 
notification to computer manufacturers of Its Intention to require all new PCs sold In 
China after July 1 to have filtertng software preinstalled. >“ 8 The notice, |olntly Issued 
by the Min, the Civilization Office of the Central Communist Party Committee, and 
the Ministry of Finance, according to the PRC Government Procurement Law. man- 
dates the procurement of all rights and services related to a designated software called 
"Green Dam Youth Escort" to be made available for free public use. Green Dam is a 
product of the Jlnhul Computer System Engineering Company, which reportedly 
received RMB 40 million from the government for a year-long contract. 1,9 

The purported Intent of the Green Dam software Is to filter harmful online text and 
Image content In order to prevent this Information from affecting youth and promote 
a healthy and harmonious Internet environment. 1,0 However, researchers at the 
OpenNet Initiative and the Stop Badware Project conducting an Initial technical assess- 
ment of the software found that Green Dam’s filtering not only Is Ineffective at block- 
ing pornographic content as a whole, but also Includes unpredictable and disruptive 
blocking of political and religious content normally associated with the Great Firewall 
of China. 191 

As a computing tool. Green Dam Is far more powerful than the centralized filtering 
system China currently Implements, as It actively monitors Individual computer be- 
havior to the extent that Its "language processing" tool can Institute extremely intru- 
sive "kill" action on sites If the content algonthm detects "Inappropriate" sensitive 
political or religious speech 19 * These actions include the sudden termination of Web 
browser tabs, whole browsers, and a wide range of programs including word processing 
and e-mall. The program Installs components deep Into the kernel of the computer 
operating system In order to enable this application layer monitoring. Researchers 
also found that the killing of sites upon Inappropriate keywords or URLs like http:// 
falundafa.org extends to killing single letters that autocomplete In location boxes and 
autocomplete lists In browsers. For example. If a user enters "epochtlmes.com" Into the 
location, the user will see the page briefly, see the warning box briefly, and then have 
the whole browser terminated. But after the user restarts the browser, epochtlmes.com 
will be In the browser history and therefore in the autocomplete list, so that the 
user may only have to type "e" into the location box to trigger the appearance of 
epochdmes.com In the autocomplete list and cause Green Dam to terminate the whole 
browser. 193 
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The monopoly status granted to |lnhul Is unprecedented, representing the first 
Instance where a government mandated a specific filtering software product for use at 
a national level Instead of performance standards that encourage consumer choice, 
security, and product quality. The mandated procurement and preinstallation of Green 
Dam also adds a new and powerful control mechanism to the existing filtering system. 
In addition to blocking already* done at the International backbones and by Individual 
online content providers. Distributing control mechanisms to end users at the periph- 
ery allows the government to partially offload the burden of monitoring and blocking 
content to individual machines on the network, amounting to a "huge distributed 
super computer dedicated to controlling online content. 1 ' 19 * 

In addition to interfering with the performance of personal computers In an unpre- 
dictable way, the poor design of Green Dam also presents security risks that allow any 
Web site the user visits to take control of the user's computer, with the potential for 
malicious sites to steal private data and commit other Illegal acts, or even turn every 
Chinese computer running Green Dam into a member of a botnet.” 4 The Stop Bad- 
ware Pro|ect at the Berkman Center for Internet and Society confirmed that the appli- 
cation violates Its Badware guidelines for software, as It does not disclose the filtering of 
political speech or the unexpected behavior of completely killing processes that con- 
tain such speech. 19 * 

Conclusion 

The Chinese government has maintained a strict and vigorous approach toward Inter- 
net censorship, interfering with public knowledge and discourse through pervasive fil- 
tering practices and a multitude of nontechnical methods. In 2008, China led the 
world with 300 million Internet users, and the sheer scale and expanding scope of on- 
line content presented a significant challenge for a government Intent on maintaining 
social stability and order In China’s networked spheres. China continues to fine-tune 
Its system of information control, including attempts to promote a public relations 
approach to online commentary and news reporting. The foundation of China's Infor- 
mation-control framework continues to be built on ensuring that domestic providers 
are responsible for filtering and monitoring hosted content. The government has also 
taken measures to distribute control mechanisms to end users through the procure- 
ment of filtering software on home computers. The 2008 Olympic Games held In Bel- 
ling had a net positive impact on access to Information, but this has abated without 
continued International pressure for greater openness and transparency. 
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In 2007-2008, political turmoil and 
campaigns to curb media coverage In 
Pakistan took place against a rela- 
tively stable backdrop of Internet fil- 
tering directed at content determined 
to be blasphemous, secessionist, anti- 
state, or anti-military. One of the 
most widely reported Instances of fil- 
tering occurred In February 2008, 
when a government order to prevent 

access to a YouTube video mocking the Prophet Muhammad resulted In a near- 
global block of the entire YouTube Web site for around two hours. 



Background 

During General Pervez Musharraf* s first term as president, military control was applied 
over the judiciary and the ruling party In Parliament, and print and electronic media 
were censored where the content was deemed to be anti-government or anti-Islam. 
Government repression of media has been particularly acute with regard to Balochl 
and Slndhi political autonomy, content considered blasphemous, and other anti-state 
or antl-religlous content. 
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1 KEY INDICATORS h 

GDP per capita. PPP (constant 2005 international dollars) 

2,357 

Life expectancy at birth (years) 

65 

Literacy rate (percent of people age 15+) 

54 

Human development index (out of 1 79) 

139 

Rule erf law (out of 211) 

169 

Voice and accountability (out of 209) 

169 

Democracy index (out of 167) 

108 (Hybrid regime) 

Digital opportunity index (out of 181) 

127 

Internet users (percent of popciation) 

10 


Source by indicator World Bank 2009a, World Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economist Intelligence Unit 2008, ITU 2007, ITU 2008. 


In October 2007, Musharraf won an Indirect, widely boycotted presidential election 
held while his two ma)or political opponents were in exile. Leading the court challenge 
over Musharraf’s eligibility to run while still serving as army chief was Chief Justice 
Ifthlkar Muhammad Chaudhry, who had himself been suspended by Musharraf In 
March 2007 and reinstated in July 2007, after a "Lawyer's Movement" instigated court 
boycotts and massive rallies around the country'. 1 Musharraf responded by suspending 
the constitution and placing the country under a state of emergency on November 3, 
the second since his bloodless coup In 1999* While waiting for the court's decision, 
Musharraf s government shut down all privately owned television stations and other 
Independent media outlets, arrested lawyers and about 60 senior Judges, and jammed 
cell phone and Internet connections.* 

Under growing International pressure, Musharraf resigned from his army position 
In late November and was sworn in for hls second term as president, finally lifting 
the emergency on December IS. However, In August 2008 the two main governing 
parties agreed to launch Impeachment proceedings, and Musharraf resigned under 
pressure. 4 In September 2008, Aslf All Zardarl. the husband of assassinated Pakistan 
Peoples Party (PPP) leader Benazir Bhutto, was elected Pakistan's new president by 
legislators. 5 

A vibrant civil society movement working against Internet censorship continues to 
operate In Pakistan and monitors developments In filtering. 6 International human 
rights groups have reported on the persecution of journalists at the hands of the Paki- 
stani military Intelligence agency and extremist groups, while advocacy groups such as 
the Pakistan Federal Union of Journalists continue to call for Investigations Into attacks 
against journalists, which are often unresolved. 7 According to the Committee to Pro- 
tect Journalists, at least five journalists were killed In connection with their work In 
2008, several of them In the conflict-torn regions of Northwest Frontier Province and 
Swat 6 Six journalists and media workers were killed In 2007.’ 




Pakistan 


491 


Internet In Pakistan 

With 3.7 million Internet subscribers, an estimated 22 million Pakistanis were online 
In 2008, constituting a penetration late of around 10 percent. 10 Pakistan has experi- 
enced considerable growth In Its Information and communication technology (ICT) 
sector; in 2003, the government deregulated Its telecom market, opening Itself up to 
corporate competition In telephone, cellular, and Internet services." Internet access Is 
widely available at Internet cafes, which accommodate many lower-income and casual 
users. Rates for usage range between PKR IS and PKR 40 per hour (USD 0.25-0.60 per 
hour), depending on location and amenities. Internet cafe managers are expected to 
monitor the activities In their establishments, but based on user experience these caffe 
appear to be mostly unregulated by the regular police. 

Since deregulation, the market has become highly competitive, and there are 
currently approximately SO ISPs In Pakistan of varying size and quality of service." 
The largest ISPs In the country Include Cybernet, Comsats, Brainnet, Gonet, and 
Paknet (a subsidiary of the Pakistan Telecommunications Company Limited, or 
PTCL}. Although the estimated penetration rate for broadband Internet is |ust over 1 
percent and demand has historically been low, Pakistan Is ranked fourth globally in 
broadband Internet growth, with a growth rate of over 180 percent In metropolitan 
areas." 

All Internet traffic In and out of Pakistan Is routed by the PTCL, which controls the 
IT Infrastructure of the country through Its subsidiary, the Pakistan Internet Exchange 
(PIE), with three international gateways at Islamabad/Rawalplndl, Lahore, and Karachi, 
and small/medlum points of presence (POPs) In six other cities. 14 Domestic Internet 
traffic Is peered at the PIE gateways within the country. In 2007, the PTCL's Karachi 
exchange reportedly processed at least 95 percent of Pakistan's Internet traffic." In 
February 2008, the construction of a fifth undersea cable system that would link India 
and France (1-ME-WE) was announced, to be available for service by the end of 2009 
and serving nine telecoms. Including the PTCL. 16 The company Invested USD SO mil- 
lion into 1-ME-WE, expected to have a capacity of 3.84 terabits per second." 

The Internet, as a tool for dissemination of information and mobilization of dell so- 
ciety, has been Increasingly Integrated Into the political life of Pakistan. Bloggers across 
Pakistan objected to the Intermittent block on the Blogspot platform and the tempo- 
rary blocking of Wikipedia In 2006, and Initiated a virtual civil society movement to 
repeal the orders. 18 In the movement against Musharraf's declaration of emergency in 
November 2007, with lawyers leading mass protests and acts of civil disobedience 
against the suspension of |udges and the constitution. 19 a convergence between new 
and old media became evident. 8 * According to one contributor to the Emergency 
Times blog (paklstanmartlallaw.blogspot.com), created to keep people Informed about 
news and protests, "the real resistance to the emergency was built on the Internet." 21 
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In the face of stringent media regulation, Individual journalists, lawyers, and viewers 
uploaded news broadcasts from banned television stations to YouTube, while stations 
offered free streaming on their own Web sites. 22 Millions signed online petitions, while 
students, youth, and others created blogs (such as the Emergency Times) and dynami- 
cally utilized an array of tools, including SMS2Bkog, Facebook. and video and photos 
uploaded to social media sites such as Fllckr, to plan flash protests and document their 
resistance In the face of a media blackout. 23 

Legal and Regulatory Frameworks 

Internet filtering In Pakistan Is regulated by the Pakistan Telecommunication Authority 
(PTA), 2 * under the directive of the government, the Supreme Court of Pakistan, and 
the Ministry of Information Technology (MolT), formerly the Ministry of Information 
Technology and Telecommunications (MITT). The PTA Implements Its censorship reg- 
ulations through directives handed down to the PTCL. 23 of which the Emirates Tele- 
communications Corporation (Etl salat) took majority control In 2006 26 

In December 2007, the government passed a cyber crimes ordinance, followed by the 
Prevention of Electronic Crimes Ordinance (PECO) enacted less than a year later and 
taking effect on September 29. 2008. 2 ’ Cyber crimes are Investigated under the jurisdic- 
tion of the Federal Investigation Agency (FIA), 28 with the support of the National Re- 
sponse Centre for Cyber Crime (NRCCC), which prosides technical assistance and a 
reporting center, and leads awareness campaigns. 21 ' In addition to laying out offenses 
for electronic forgery, fraud, criminal data access, and the use of malicious code, the or- 
dinance made "cyber stalking" — which requires "Intent to coerce, intimidate, or harass 
any person" using computers or networks — a crime punishable by up to seven years' 
Imprisonment. 30 Media rights advocates expressed concern that the prohibition 
against taking or distributing photographs of a person without consent made one of 
the major components of citizen journalism Illegal. 31 The ordinance also makes 
“cyberterrorlsm," defined as the access or utilization of a computer network or elec- 
tronic system or device by a person or group with "terroristic intent," an offense pun- 
ishable by life imprisonment o* death. 32 

In the absence of a specific legal framework, Pakistan’s filtering practices have 
evolved largely out of executive action taken by various government organs. Blocking 
orders have been Issued through an opaque process that Invites speculation as to the 
political motivations behind them, with authorizing agencies alternating between the 
Morr, the PTA, the courts, and law enforcement. For example. In August 2008 the civil 
society organization Pakistan 1CT Policy Monitors Network announced that six URLs 
were blocked upon the request of retired Admiral Afzal Tahir, accused in a number of 
YouTUbe videos of abusing his office In a personal land dispute. 33 In October 2008, the 
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government announced that the terrorism wing of the country's F1A would be tasked 
with hunting down the "antidemocratic" forces that were circulating YouTube videos 
and text messages aimed at discrediting the ruling party's politicians. 34 

On September 2, 2006, the MolT announced the creation of a committee to monitor 
the content of offensive Web sites. Composed of representatives from the MorT, the 
PTA, the Ministry of the Interior, and the cabinet, as well as members of security 
agencies, and presided over by the Secretary of the MolT, the Inter-Mlnlsterlal Com- 
mittee for the Evaluation of Websites (1MQ was tasked with examining and blocking 
Web sites containing blasphemous, pornographic, or anti-state material. 15 To address 
the grievances of Internet users with this censorship body, the government set up the 
Deregulation Facilitation Unit to deal with users' complaints. 1 * 

Much of the episodic filtering in Pakistan has been ordered In reaction to "blasphe- 
mous" content. On February 28, 2006, the PTCL Issued a Hocking directive banning a 
dozen URLs posting controversial Danish cartoons depicting Images of the Prophet 
Muhammad. 37 Within two weeks In March, In a series of escalating Instructions, the 
Supreme Court directed the government to block all Web sites displaying the cartoons, 
to explain why they had not been blocked earlier, to block all blasphemous content, 
and to determine how access to such content could be denied on the Internet world- 
wide. 33 The Supreme Court also ordered police to register cases of puHtshlng or post- 
ing the blasphemous Images under Article 29S-C of the Pakistan Penal Code, where 
blasphemy or defamation of the Prophet Muhammad Is punlshaHe by death. 3 * 

President Musharraf's crackdowns on the media Included content prohibitions and 
enhanced government discretion as to licensing requirements in order to cultivate 
self-censorship. The Pakistan Electronic Media Regulatory Authority (PEMRA) was 
established when Musharraf allowed for the creation of privately owned. Independent 
broadcast media In 2002. One of Its first acts was to lay out the regulatory framework 
that would ultimately support Musharraf's drive to control and restrict Independent 
journalism. Tills framework instructed that In order to obtain a broadcast license, 
media outlets were required to preserve the sovereignty, security. Integrity, values, and 
constitutional principles of public policy of Pakistan." Article 27 of the 2002 ordi- 
nance also directly prohibited the broadcast or distribution of any content "against 
the Ideology of Pakistan," as well as programming that "is likely to create hatred 
among the people. Is prejudicial to the maintenance of law and order, Is likely to 
disturb public peace and tranquility, endangers national security or Is pornographic, 
obscene or vtilgar or Is offensive to the commonly accepted standards of decency." 41 

Upon declaring a state of emergency In 2007, Musharraf further amended PEMRA’s 
charter to prohibit programming that "defames or brings Into ndlcule the head of 
state, or members of the armed forces, or executive, legislative or judicial organ of the 
state," 42 as well as content "against the Ideology, sovereignty 1 , Integrity or security of 
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Pakistan/'** Video footage of suicide bombas, terrorists, and their victims was 
banned.** PEMRA was now empowered to close any broadcast service In a "situation 
of emergency" and to seize equipment or seal the premises of licensees “In the public 
Interest,"* 5 with penalties expanded to Include three years' imprisonment and the 
maximum fine increased from PKR 1 million to PKR 10 million.* 0 For print media, the 
Press. Newspapers, News Agencies and Books Registration Ordinance. 2002 (XCm of 
2002) was amended to reflect the same content prohibitions and grant the government 
the same emergency authority to shutter any publication for up to 30 days.*’ In April 
2008, the MorT Introduced a bill to repeal these amended provisions, reduce the maxi- 
mum fine to PKR 1 million, and abolish the provision banning broadcasts "against the 
Ideology of Pakistan."** 

Musharraf did not take such an assiduous approach toward restricting online con- 
tent during the emergency, although telephone and lntanet access were Intermit- 
tently cut. However, all privately owned radio and television stations were shut down, 
some by force,* 1 ' and cable operators were banned from broadcasting any national or 
International news channels. 50 The Code of Conduct created after the emergency was 
characterized as voluntary. 51 but most of these stations were allowed to resume broad- 
casting In December only after agreeing to abide by the Code of Conduct. 5 * In Decem- 
ber 2008, the Pakistan Broadcasters Association (PBA) announced that It would 
formulate Its code of conduct and self-regulate among Its members. 53 

lntanet Surveillance 

The Prevention of Electronic Crimes Ordinance requires ISPs to retain all traffic data for 
at least 90 days and to provide It to the government upon request, or face fines and up 
to six months' imprisonment. 54 Providas may also be required to coopaate in the col- 
lection of real-time data (Including traffic data) and to keep their Involvement confi- 
dential. 55 The bill ostensibly focuses on the use of the Internet to commit acts of 
terrorism, but Its scope Is broad enough that Pakistani bloggers and Reporters Without 
Borders expressed concern ova the Impact on Internet freedom.** 

Pakistani media have reported that the PIE, which controls the International gate- 
ways, monitors all incoming and outgoing lntanet traffic In Pakistan. This capability, 
In addition to filtering, allows It to monitor and store all e-malls for a certain period of 
time. 47 There are no reported cases of people Imprisoned for their online activities, and 
most Pakistani bloggers view government surveillance as more clumsy than frighten- 
ing. At the same time, political events that genaate unusual amounts of online chatter 
and debate, Including the suspension of Chief Justice Chaudry in March 2007, cause 
bloggers and other users to worry about bang censored or targeted. 58 After the Imposi- 
tion of de facto martial law In November 2007, several bloggers made arrangements to 
have their blogs published outside of Pakistan. 59 
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ONI Testing Results 

Episodic filtering. In addition to routine blocking of Web sites considered blasphemous 
or threatening Pakistan's Internal secunty, continued through the end of Musharraf's 
term as president and into the tenure of the new civilian government. In December 

2007, the enactment of the cyber cnmes ordinance was followed shortly by the 
reported blocking of several hundred and-govemment blogs. 60 In late December 

2008, upon the recommendadon of the IMG, the PTA issued an order to block six 
URLs: three from dlctatorshlpwatch.com, a Web site created after Musharraf declared 
a state of emergency; one from makepaklstanbetter.com, a social and polldcal discus- 
sion forum; one from frlendskorner.com, another discussion forum; and one from 
buzzvlncs.com. M The common thread among the Web pages appeared to be Informa- 
tion about Pun|ab Governor Salman Taseer, 6 * rather than any type of content under 
the authorized purview of the IMG. 

OpenNet Initiative testing was conducted on Cybernet. UNKdotNET, the PTCL. and 
Micron et in May through July 2008. There Is no uniform method of blocking among 
the four ISPs tested. Cybernet blocks by setting a DNS lookup failure; both UNKdotNET 
and Mlcronet employ block pages — LINKdotNET by means of Squid Proxy and Micro- 
net using both proxy server and Squid Proxy. The PTCL had appeared to rely on DNS 
poisoning by redirecting to an IP address they own containing no content, but during 
later rounds of testing switched to a block page using a proxy server. 

A comparison of ONI testing results from 2006-2007 and 2008 indicates that despite 
high-profile filtering incidents, ISPs may actually be blocking less content. For exam- 
ple, in contrast to testing results from 2006 to 2007, where the PTCL Implemented a 
limited block on pornography and religious conversion sites, 2008 testing found no 
evidence of filtering In these categories. 

A form of collateral filtering, the blocking of additional content that Is unintended 
and caused by imprecise filtering methods, 63 has long been a feature of Internet cen- 
sorship in Pakistan. For example. In March 2007, In an attempt to comply with a 
Supreme Court order to filter blasphemous content "at all costs," the PTCL Im- 
plemented a blanket IP address block at their Karachi PIE exchange that lasted for 
four days and Impacted the Akamai servers, leading to disruptions In accessing Google, 
Yahoo. BBC, CNN, ESPN, and several other ma|or Web sites. 6 * In January 2008, 
several bloggers reported the blocking of the Blogspot.com and Wordpress.com 
domains. 64 

One of the most severe examples of collateral filtering took place in February 2008, 
when a government attempt to block YouTUbe in Pakistan made the entire Web site 
inaccessible to most Internet users around the world for up to two hours. 66 On Febru- 
ary 22. the PTA Issued an order to block access to a single video, while listing three 
IP addresses. 6 ' The film Fitna by the Dutch parliamentarian Geert Wilders, which 
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contained '‘blasphemous" content considered offensive to Islam, was the official cause 
of the block, but others claim that the government could have been trying to suppress 
a video depicting a woman engaging In election fraud In Karachi. 68 In response, the 
ITCL redirected requests for YouTube videos to Its own network. This rerouting was 
advertised to the Internet at large and was picked up by the Hong Kong-based ISP 
PCCW, which then broadcast the redirect to ISPs around the world.** YouTUbe staff 
worked with PCCW to restore access within two hours. 70 Access to YouTube was 
restored In Pakistan after the video listed In the PTA blocking order was removed. 

The Web sites blocked by all four ISPs provide a representative snapshot of 2008 
filtering practices, consisting entirely of Balochl news, independence, and culture Web 
sites, with the exception of two: the and-Islamlst (lhadwalch.org and themovlefitna 
.com, a Web site dedicated to coverage of Geert Wilders and his film Film. 

The filtering of material considered blasphemous or and-lslamlc has long been a pur- 
ported objective In Pakistan. In 2006-2007, most material relating to the Danish car- 
toon Incident that led to a block on the endre Blogspot.com domain was blocked by 
ISPs; 2008 testing showed that many of these have since been hacked or unblocked. 
Cybernet, UNKdotNET. and the PTCL blocked a right-wing American Web site con- 
taining the cartoons (zombletlme.com), while leasing only Cybernet to block one 
other relevant Web site, mohatnmeddrawlngs.com. 

By April 2006, the PTA extended their blocking to and-state Web sites as well as those 
promoting Balochl human rights and political autonomy. 71 Tesdng done by the ONI 
In 2006-2007 confirmed that internal security conflicts had become a strong focus for 
filtering, including Web sites reladng to Balochl Independence movements, Sindh! 
human rights, and polldcal autonomy movements. Among these categories, Web sites 
addressing Balochl political Independence were the most comprehensively blocked. 

Filtering of content in 2008 continued to target these categories of Web sites, albeit a 
smaller number and with even greater inconsistency. All four ISPs blocked Web sites 
tested reladng to human rights, news, and (usdce (e.g., www.balochlstanlnfo.com) 
In the province of Balochlstan. However, a number of Balochlstan-related Web sites 
blocked by all four ISPs have been closed, Including www.balochfront.com and 
baloch2000.org. Other Web sites were blocked by a comblnadon, but not all. of 
the ISPs, including the Balochlstan Legal Fund (www.bso-na.org) by Cybernet, 
UNKdotNET, and the PTCL; the Balochl Independence Web site balochestan.com by 
Cybernet and UNKdotNET; and www.balochtawar.net by Cybernet and Mlaonet. A 
limited selecdon of Balochl-relaled blogs were also blocked, with all four ISPs filtering 
www.rahlmlaandehvarl-blogfa.com. 

A selected number of the Slndhl sites tested continued to be blocked In 2008, such 
as www.workdslndhl.org, which was blocked by the PTCL, Mlcronet, and UNKdotNET. 
Unlike In 2006-2007, none were blocked by all four ISPs. However, In contrast to 
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2006-2007, when the lew existing Web sites pertaining to Pashtun secesskmtsm were 
fully accessible, Mlaonet blocked the Pashtun discussion board www.kHabtoon.com. 

The blocking of a selective number of blogs and Web sites containing purported antl- 
Islamlc and antl-Paklstanl content was one continuity between 2006-2007 and 2008 
testing, such as the Indian militant extremist sites www.hinduunlty.com that was 
blocked by Cybernet and LTNKdotKET and antl-lslamlc Web sites (www.plusultrablog 
.com by Cybernet; ss-ww.nordlsh.net blocked by Cybernet, LlNKdotNET, and the 
PTCL). However, there was also less filtering of blogs in 2008. A limited number of 
Web sites not directed at Pakistani Issues were filtered by some, but not all, ISPs. For 
example, the blog of Michelle Malkin, a popular conservative American blogger, was 
Inaccessible on all ISPs In 2006-2007; In 2008, only Cybernet filtered mlchellemalkln 
.com. A free online radio site, Liw36S.com, was filtered by Cybernet, LlNKdotNET, and 
the PTCL. 

Since the last round of testing. It appears that more responsibility for implement- 
ing filtering Is being shifted down to the ISP level. The most recent round of testing 
also showed that filtering across ISPs Is less consistent than In 2006-2007, when all 
but a handful of filtered Web sites were blocked by all the ISPs. In 2008, Cybernet 
blocked the greatest number of Web sites tested, filtering twice as much as the nearest 
ISP; Cybernet was followed by LlNKdotNET. PakNet, and Mlaonet (In descending 
order). Between ISPs, the greatest owrlap In filtering occurred between Cybernet and 
LlNKdotNET. 

The ONI testing in 2008 showed that In continuity with 2006-2007 results, the vast 
majority of newspapers and Independent media, soaal media such as YouTube and 
Blogspot.com, arcumventlon tools. International human rights groups, VoIP services, 
civil society groups, minority religious Web sites, Indian and Hindu human rights 
groups, Pakistani political parties, and sexual content (Including pornography and gay 
and lesbian content) were accessible on all four ISPs. 

Conclusion 

Pakistanis currently have unimpeded access to most sexual, political, social, and reli- 
gious content on the Internet. Although the Pakistani gowmment does not currently 
employ a sophisticated blocking system, a limitation which has led to collateral blocks 
on entire domains such as Blogspot.com and YouTube.com, It continues to block Web 
sites containing content It considers to be blasphemous, antl-lslamlc, or threatening to 
Internal security. 

Online civil society activism that began in order to protect free expression and blog- 
ging rights has expanded as citizens utilize new media to disseminate information and 
organize In the face of media blackouts and other political crises. 
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South Korea 


Over the years, the growing sophisti- 
cation and dynamism of the Internet 
In South Korea have also raised con- 
cerns of Its power to spread harmful 
slander and Information. In response, 
the South Korean government Is 
authorized through an expansive reg- 
ulatory framework to exercise signifi- 
cant discretion over "Illegal" Internet 
content and "harmful" material for 



youth. In addition to rigorously regulating providers, government agencies also 
enforce real-name registration requirements for participation In Internet services 
and closely monitor election-related online activities. 


Background 

The Republic of Korea (also known as South Korea) was established In 1948 and spent 
most of Its first four decades under authoritarian rule. In 1987, after a massive protest 
movement, the government enacted a democratic constitution that has endured to 
this day. Overall, South Korea’s human rights record has steadily and markedly 
improved since the 1990s. Since that time. South Korea has become one of the most 
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1 KEY INDICATORS | 

GDP per capita, PPP (constant 2005 international dollars) 

23,399 

Life expectancy at birth (years) 

79 

Literacy rate (percent of people age 15+) 

99 

Human development index (out of 1 79) 

25 

Rule erf law (out of 211) 

53 

Voice and accountably (out of 209) 

69 

Democracy index (out of 167) 

28 (Full democracy) 

Digital opportunity index (out of 1 81 ) 

1 

Internet users (percent of popiJation) 

77.8 


Source by indicator World Bank 2009a, World Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economic Intelligence Unit 2008, ITU 2007, ITU 2008. 


vibrant democracies In Asia. Its citizens enjoy universal suffrage and broad constitu- 
tional freedoms, and they choose their leaders in free and fair multipart)' elections. 

South Korean foreign relations remain dominated by the state's relationship with the 
Democratic People's Republic of Korea (or North Korea), with which South Korea has 
technically been at war since the two sides fought to a stalemate in 1953. Since that 
time, the South Korean government has often been Intolerant of dissident views and 
those espousing communism or supporting North Korea; publicly praising North Korea 
has been, and remains, illegal. Human rights groups charge that, since its enactment In 
1948, thousands of South Koreans have been arrested under the state's anticommunist 
National Security Law (NSL(. Those arrested over the years have included students, 
publishers, trade unionists, political activists, professors, and Internet users, many 
peacefully expressing their political slews. 1 While prosecutions under the NSL have 
decreased significantly since the transition to democracy, there have been a few recent 
high-profile Investigations using the NSL. 2 As of 2004, Amnesty International reported 
that 14 people were In prison under the law.* 


Internet In South Korea 

South Korea Is one of the most connected countries In the world, with over 77 percent 
of South Koreans age six and older using the Internet.* South Korea has also become 
the most penetrated broadband market In the world; by early 2008, 90 percent of 
households used broadband. 4 Following heavy investment In broadband Infrastructure 
after the Aslan financial crisis in the late 1990s, South Korea now provides Its citizens 
with a national network that carries data at speeds for the average broadband user of 
50-100 Mbps. 6 Over three-quarters of South Korean Internet users use the Internet 
more than once per day. 7 
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By 2008, Korea's 114 Internet service providers (ISPs) were connecting at six Internet 
exchanges (IX) providing a total of 1,4S0 Gbps capacity to South Korean Internet 
users. 8 However, three South Korean ISPs OCT, formerly known as Korea Telecom, 
Hanaro Telecom, and Korea Thru net) control nearly 8S percent of the broadband mar- 
ket. The largest broadband supplier, KorNet, provides about half the ADSL lines In the 
country, making It the largest ADSL supplier In the world. 9 

Dedicated blog service providers, video sites, and online news sites saw the biggest 
growth in 2008. 10 Over SO percent of Korean Internet users have created user- 
generated content (UGC), with over 30 percent producing content at least once a 
month. 11 Most UGC Is centered around Web portals and Is text based, though over 
50 percent Is in video and flash-generated formats. 14 The government has acknowl- 
edged that UGC has powered social and political transformation: whereas political dia- 
logue tends to be limited to that between politicians and ma(or media, high-speed 
Internet Infrastructure and social media tools have allowed users anywhere to engage 
In real-time dialogue. 13 Of the 67 percent of Korean Internet users who read news 
online, almost 90 percent rely on news services provided by portals, followed by 60 
percent vlewershlp of Web sites of print publications. 1 * 

Thus, it Is not surprising that citizens of South Korea, one of the world's most net- 
worked countries, have come to Influence and In some cases transform the political 
and social fabric through their online participation. In April 2008, as part of trade 
negotiations with the United States. President Lee Myung-bak's administration agreed 
to resume Imports of American beef after a five-year ban. 14 On April 29, 2008, a televi- 
sion program called PD Nottl>ook on the network MBC claimed that “Koreans are 94 
percent more likely to contract a human form of mad cow disease," sparking a flood 
of online debate, especially on the Agora forum of Korea’s second-largest portal, 
Daum (which saw a dally page-view count spike from 40 million to 200 million). 16 A 
group called the People's Association for Measures against Mad Cow Disease, led by 
organizations such as the Korean Confederation of Trade Unions and the Korean 
Teachers’ and Educational Workers' Union, led about 100 days of protests and 
demanded the resignation of the Lee Myung-bak administration. 17 These protests 
were coupled with online action, as protesters uploaded Images to the Internet, sent 
messages on protest meet-ups and warnings on arrests via text messaging, and engaged 
In online debate. 1 * Ultimately, his entire cabinet resigned and Lee was forced to call for 
a "new beginning” for his government. 19 

The power of the Korean cyberspace was also chillingly demonstrated in the suicides 
of at least four celebrities In 2007 and 20G8. 20 Korea's online community was blamed 
for spreading malicious rumors and attacks on actress Choi Jin Sll's character that were 
alleged to have driven her to commit suicide In October 2008.*' In hundreds of thou- 
sands of posts, Internet users circulated rumors that Choi was a loan shark who had 
pressured the actor Ahn Jae Hwan to repay a USD 2 million loan, and ultimately kill 
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himself. 22 After Choi's suicide, the Cyber Tenor Response Center of the National Police 
Agency launched a one-month probe Into "false rumors and malicious postings" on 
the Internet, mobilizing Its 900 Investigators to crack down on "malpractice" con- 
ducted over the Internet as well as cell phones. 23 The police reported more than 
10,000 cases of online libel In 2007. 24 

Legal and Regulatory Frameworks 

Despite Korea's democratic credentials. Its free speech protections are weak relative to 
many other democracies. Article 21 of the Korean constitution guarantees that "all citi- 
zens shall en|oy freedom of speech and the press," but also contains the qualification 
that "neither speech nor the press shall violate the honor or rights of other persons nor 
undermine public morals or social ethics." 24 This caveat empowers the government to 
Impose restrictions on a broad range of expression. 

Laying the foundation for all digital and analog content regulation. Article S3(l) of 
the Telecommunications Business Act (1991) states "a person In use of telecommunica- 
tions shall not make communications with contents that harm the public peace and 
order or social morals and good customs." 2 ® Harmful communications were to be de- 
termined by presidential decree, 2 ' and under the original formulation constituted con- 
tents that "aim at or abet a criminal ad. aim at committing antistate activities, and 
Impede good customs and other social orders." 28 Further, harmful communications 
could be refused, suspended, or restrlded by order of the minister of the Ministry of 
Information and Communication (MIC), which delegated this authority to the Infor- 
mation and Communication Ethics Committee (ICEC). 2 * The ICEC was established 
under an amended Telecommunications Business Ad (199S) to regulate the content 
of communications and inform state policy aimed at suppressing subversive communi- 
cations and "promoting active and healthy Information.'' 30 

In June 2002, the Supreme Court struck down the provisions of the Telecommunica- 
tions Business Act defining "harmful" content and granting the government unlimited 
authority to regulate It.*' It held Article S3(l) to be Insufficiently specific and dear, and 
Article S3(2) to violate the rule against blanket delegation.* 2 A student at Hankook 
Aviation University had posted a message in June 1999 entitled, "Exchange of Gunfire 
in the West Sea, Sloppy Kim Dae-|ung!" on the "urgent message board" of the online 
community Chanwoomul, which a systems administrator deleted before suspending 
the student's use of the service for one month In accordance with an order from the 
MIC* 3 In August 1999, the student filed a constitutional complaint, arguing that 
the provisions Infringed on his freedoms of expression, science, and arts, and violated 
due process and the principle against excessive restriction. However, the Supreme 
Court found that MIC orders to refuse, suspend, or restrict communications violated 
neither the principle of proportionality nor due process of law. and did not Infringe 
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on the freedom of expression. It cautioned that under the Administrative Procedures 
Act, users are to be given advance notice of admlnlstratls'e agency decisions, should 
be given opportunities to submit opinions, and have the right to participate at formal 
or public hearings. 34 

In December 2002, the National Assembly amended Article S3 to prohibit content 
that Is ''Illegal" rather than "harmful." while upholding the executive powers of the 
MIC and the delegated regulatory authority of the ICEC.“ This provision was ulti- 
mately repealed with the 2007 amendment of the Act on Promotion of Information 
and Communications Network Utilization and Information Protection (Information 
Ad), 36 although this definition remains in place at least functionally. 3 ' Illegal Informa- 
tion included in types of Information to be reported continues to be described as that 
which Infringes upon public Interests and social order, specifically obscenity, defama- 
tion, violence or cruelty. Incitement to gambling, and public order.** 

Specific laws to protect youth, national security, and other national priorities have 
Informed the scope of content regulated by the government-delegated bodies responsi- 
ble for filtering. For example, the NSL provides "up to seven years in prison for those 
who praise, encourage, disseminate or cooperate with antistate groups, members or 
those under their control. " 3V The NSL has been used to criminalize advocacy of com- 
munism 40 and groups suspected of alignment with North Korea, 41 although arrests 
under the NSL have become much less frequent In recent years. Nevertheless, the law 
continues to have a chilling effed on public discussion of North Korea 41 and provides a 
justification for censorship of Web sites related to North Korea and communism. 

Similarly, the dlredlve to proted the country's youth from "harmful" Internet con- 
tent, broadly described as "immoral, violent, obscene, speculative and antisocial Infor- 
mation," 43 has been one of the central planks In the development of South Korea’s 
filtering policy. Hie standard of harm In the Enforcement Decree of the Juvenile Pro- 
tection Act (JPA) was developed from criteria for deliberation of media materials harm- 
ful to Juveniles, which include provocative, obscene, antisocial, violent, or unethical 
materials that may harmfully aflect their mental and physical health. 4 * In accordance 
with the JPA. ISPs are responsible, as "protedors of juveniles," for making Inappropri- 
ate content inaccessible on their networks. 4S Web sites carrying adult content must 
warn visitors and require identification verification for access, measures meant to pre- 
vent minors under 19 from accessing pornographic material. 46 

In February 2008, the Korea Communications Commission (KCC) was created to 
consolidate the MIC and the Korean Broadcasting Commission (KBQ. Under South 
Korea’s current legal framework, regulation of Internet content Is conducted primarily 
by two government agencies: the Korean Communications Standards Commission 
(KCSQ 47 (formerly K1SCOM) and the National Eiedlon Commission (NEC). 

The KCSC Integrated the functions of the KBC and K1SCOM In February 2008. 4 * 
KISCOM’s mandate was originally established through the creation of the ICEC in 
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1995. 4W Accordingly, the two KCSC subcommissions deal separately with broadcasting 
and telecommunications standards. 50 

At Its Inception, the ICEC was empowered to develop general principles or codes 
of telecommunications ethics, conduct deliberation on and request the "correction'' of 
Information declared "harmful" by presidential decree, and operate reporting centers 
against unhealthy telecommunications activities. 51 The KCSC telecom subcommission 
continues to make determinations on "requests for correction" with respect to ISPs and 
Internet content providers (ICPs). 52 Thus, the KCSC Is empowered to make determina- 
tions on Information "harmful" to youth under the Juvenile Protection Act, 45 as well 
as recommend action against Web sites containing "Illegal" content, including por- 
nography, Information for cyber criminals, gambling services, and Web sites that ex- 
press support for communism or for the government of North Korea. 54 The scope of 
Its authority extends to ordenng the blocking of Web sites, the deletion of a particular 
message Identified as an Improper communication, a Web site’s closure, or the suspen- 
sion of the particular user Identification of the Individual who posted the improper 
writing. 55 In addition to special advisory committees, the KCSC also mediates disputes 
over online defamation. The KCSC said it received 1S6.000 complaints In 2006 about 
Internet postings considered Inaccurate, and 216,000 In 2007. 56 

With President Lee’s full support, government ministries proposed a battery of legis- 
lation beginning in July 2008 that would create a framework for addressing defama- 
tion. "false rumors," and "malicious postings." In July 2008, the KCC introduced the 
Comprehensive Measures on Internet Information Protection, which would Institute 
50 changes to communications and Internet regulation. 57 In amendments to the Infor- 
mation Act, the South Korean government further expanded the already significant 
regulatory authority of the KCC by adding to online providers’ liability for the ads of 
their users. The KCSC would be authorized to force Internet portals and peer-to-peer 
Web sites to delete content or suspend publishing for a minimum of 30 days upon 
receiving a complaint of articles accused of being "fraudulent" or "slanderous," during 
which the commission would determine whether disputed articles should be removed 
permanently. 5 * Internet portals that failed to temporarily block online postings con- 
taining defamatory Information would be subject to a fine of up to KRW 30 million 
or could be forced to shut down, 50 while portals or Individuals Involved In improp- 
erly manipulating Internet search results could be subject to Imprisonment for up 
to one year and a fine up to KRW 10 million.' 0 Upon a leak of personal Information, 
the portal must Inform the victim of the privacy breach and report the matter to the 
KCC. 

Following an approach taken with other emergent forms of harmful or illegal con- 
tent, portals, bulletin boards, and other Internet content providers have Increasingly 
taken on responsibility for policing slanderous content. While they would be legally 
compelled to set up constant ln-house monitoring functions, 61 Korea’s two largest 
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Internet portals also Implemented their own measures to curb postings considered to 
violate privacy; lor example, Naver created a simplified process lor users to quickly 
block "groundless rumors or postings" and Daum required users to click on a dlflerent 
box ll they want to read other users' comments.® 2 

In July 2008, Minister ol Justice Kim Kyung-hwan announced the introduction ol 
the crime ol "cyber defamation," which would punish those who openly Insult others 
through the Internet with up to two years imprisonment or a KRW 10 million fine. 6 * 
Under this rubric, criminal law would apply to delamaUon and threats, while penalties 
lor cyber delamatlon and "cyberstalklng" would be pursued under information and 
communication laws.' 4 

Although the Lee administration denied that It had orchestrated the crackdown, 
government prosecutors also pursued blogger Park Dae-sung on charges ol "spreading 
lalse data In public with harmiul Intent." punishable by as many as five years In prison 
or fines ol up to KRW SO million.' 1 * Using the pen name Minerva, blogger Park Dae- 
sung had posted nearly 300 entries on Daum’s Agora Internet forum between March 
2008 and January 2009 66 His accurate predictions ol financial events such as the fall 
ol Lehman Brothers and the a ash ol the won gained him prophetic status, but also 
drew allegations that he cost the government billions ol dollars by undermining finan- 
cial markets. 67 Park was arrested In January 2009 but acquitted In April; prosecutors 
announced that they would appeal the ruling. 66 

On Apnl 1, 2009, the National Assembly adopted a "three-strikes" approach to copy- 
right Infringement, particularly file sharing and downloading movie content. 69 In an 
amendment to Article 133 ol the Copyright Law dealing svlth the "Collection, Aban- 
donment, and Deletion ol Illegal Reproductions," the Minuter ol Culture. Sports, and 
Tourism would be authorized to shut down message boards that refuse to comply with 
more than three warnings to remove copyrighted content, 70 while users who upload 
such content may also have their accounts canceled. 71 These punitive measures could 
be taken regardless ol whether a takedown request by a copyright holder has been 
Issued. 72 

Social media sites whose "main purpose U to enable dlflerent people to Interactively 
transmit works, etc., among themselves" are treated as "special types ol online service 
providers" under Article 104 ol the Copyright Law. 72 Article 104 providers are obliged 
to take "necessary measures" to Intercept the Illegal Interactive transmission ol copy- 
righted works upon the request ol rights holders. Article 142(1) lays out fines for these 
special providers who fall to take necessary measures at a maximum ol KRW 30 mil- 
lion, while other providers who "seriously damage" the enforcement ol copyright as a 
result ol their failure to take down reproductions or "interactive transmissions" are also 
subject to fines ol up to KRW 10 million. 7 * Under the amended legislation, Artlde 104 
providers who have been fined under Article 142(1) twice and have failed to take nec- 
essary measures can be blocked upon the Issuance ol a third fine. 7 * 
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South Korea's elections framework allows significant limits to be placed on po- 
litical speech prior to and during elections. In order to prevent corruption, promote 
equal opportunity, and minimize the social economic losses and "side elfect[s]" that 
“unlimited free campaigns" might cause.'® Elections are restricted by numerous 
detailed prohibitions on campaign-related activities that would be standard practice 
In many other democracies. Including endorsing a candidate if you are an elected 
official, 77 conducting a public opinion poll within the six days before an election, 74 
and setting limits on campaign locations, the posting of campaign paraphernalia, and 
so on. 

The Ejection Law also extends these restrictions to campaign activities conducted on 
Information and communication networks. As the prohibition with the greatest Im- 
pact on Internet speech. Article 93 of the Public Official Election Law (“Election Law") 
makes It Illegal for noncandidates to distribute information supporting, recommend- 
ing, or opposing any political party’ or candidate. 71 ' Election commissions that discover 
Information posted online that violates the Election Law may demand that the Web 
site or hosting service delete, restrict, or suspend the relevant Information: the service 
provider must promptly comply or raise an objection.* 0 

The NEC Is responsible for controlling all aspects of Korean elections, from counting 
votes to monitoring the media and tracing campaign contributions* 1 The NEC moni- 
tors and censors domestic online media platforms In order to maintain the country's 
restrictions on election-related political speech,* 7 especially Its ban on public advocacy 
of candidates prior to an election period It has used this power to remove more 
than 100,000 election-related articles, comments, and blog entiles from the Internet,** 
as well as more than 6S,000 movies posted to video-sharing Web sites.** The NEC 
began censoring the Internet in the early 2000s, partly In reaction to the significant 
role the Internet played In the 2002 presidential election. It currently has two divisions 
that are devoted to Internet regulation and censorship: the Internet Election News 
Deliberation Commission (IENDC), which handles newspaper Web sites and other 
online media sources (or "Internet press"),*' and the Cyber Censorship Team (CCT), 
which monitors personal blogs, videos, message board comments, and other Web 
sites.*® 

The lENDC's mission Is to ensure that newspaper Web sites, online news agencies, 
and other semiofficial online news sources are impartial In their campaign coverage 
and do not violate election laws.*' The IENDC has a great deal of discretion to decide 
what constitutes a violation of these rules and to censor the Internet press accordingly. 
Generally, It does so by contacting the relevant Internet press organizations and telling 
them to change their content or to Issue a correction. 

Started In 2002, the CCT has the formidable task of policing everything else on the 
Internet, Including blogs, personal Web sites, video postings, and message boards.** 
The CCT has three main tasks: first, to prevent people from making damaging and 
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untrue statements about the candidates In an election; second, to maintain the prohi- 
bition against campaigning at any time other than the officially sanctioned two- to 
three-week election period; third, to ensure that all message board users only make 
comments during the election using their full, real names. All three tasks axe usually 
executed by requesting the Web site’s hosting service to delete or change offending 
content, and If the hosting service refuses to delete It, the CCT will open an investiga- 
tion and press charges. Monitoring Is carried out by about 1,000 part-time workers, 
who are hired nationwide 120 days before every election to run a search program to 
find and flag suspicious content-* 9 

Violation of the law against advocating a candidate prior to the election period can 
be punished with a fine of up to KRW 4 million or two years In prison. 90 Offending 
acts include posting long opinions on Web portals and Web sites of political parties, 
posting comments on online news articles, or any similar acts on personal Web sites 
or blogs. 9 ' However, the NEC has stated that "there Is small chance that citizens will 
face legal charges for posting their opinion as they will be viewed flexibly In actual 
crackdowns." 92 

The line between campaigning and normal discussion Is extremely vague, and the 
decision to censor Is made at the discretion of the CCT's officers. Tills vagueness has 
had a chilling effect on online political discourse, especially at video-sharing sites, 
whose election-related content has been reduced to little more than videos produced 
by the campaigns themselves. 9 * Between the 2004 and 2007 presidential elections, 
the total number of deletion requests for early campaigning skyrocketed, from 2,42S 
to 76,277. Media have also reported that from June 2006 to May 2007, up to 19,000 
online election-related messages were deleted, while legal punishment was pursued 
against 13 messages containing false rumors about candidates. 94 

Surveillance 

The South Korean constitution guarantees that the privacy (Article 17) and the privacy 
of correspondence (Article 18) of citizens shall not be violated. 9 * While most scholars 
believe that Article 17 forms the basis of a right to privacy, 9 * the Supreme Court has 
also held that together with Article 10, guaranteeing human dignity and the right to 
pursue happiness, "these constitutional provisions not only guarantee the right to be 
let alone, which protects personal activity from Invasion by others and public expo- 
sure, but also an active right to self-control over his or her personal Information In a 
highly lnformatlzed modem society." 97 

Internet service providers are generally’ directed to gather the minimum amount of 
Information necessary and axe restricted from disclosing personal Information beyond 
the scope of notification or from collecting certain personal Information, such as 
"political Ideology, religion, and medical records," that would likely infringe the user’s 
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privacy without consent.''* However, these protections do not apply where special pro- 
visions apply or other laws specify otherwise. 

Real-name registration requirements have been a part of the South Korean Internet 
landscape since 2003, when the MIC sought the cooperation of four ma)or Web portals 
(Yahoo Korea, Daum Communications, NHN, and NeoWlz) in developing real-name 
systems for their users." While implicating deeper privacy concerns, the purported 
goal of these real-name measures is to reduce abusive behavior on the Internet, and a 
number of prominent cases (such as the suicides of a number of actresses) have made 
this a major issue for the Korean public. 100 

In 2004, election laws began requiring individuals who post comments on Web sites 
and message boards In support of, or opposition to, a candidate to disclose their real 
names. 101 In 200S, the government Implemented a rule that requires anyone who cre- 
ates an account with an e-mail or online chat service to provide detailed information 
that Indudes name, address, profession, and Identification number. 102 This policy was 
tightened further by the MIC on July 27, 2007, when users were required to register 
their real names and resident Identification numbers with Web sites before posting 
comments or uploading video or audio dips on bulletin boards. 10 * In December 2008, 
the KCC extended Its reach to require all forum and chat room users to make verifiable 
real-name registrations. 10 * Furthermore, In April 2009 an amendment to the Informa- 
tion Act took effect, requiring Korea-domaln Web sites with at least 100,000 visitors 
dally to confirm personal Identities through real names and resident registration num- 
bers. 104 Previously, real-name registration was required for news Web sites with more 
than 200,000 visitors a day or portals and user-generated content sites with over 
300,000 dally visitors. 10 * On April 9, reportedly citing freedom of expression as "the 
most important value to uphold on the Internet" as justification, Google disabled 
the features on Its Korean language YouTube site (kr.youtube.com) for uploading 
videos and comments. 107 

Amendments to the Protection of Communications Secrets Act put forward in 2007 
would establish extensive data retention requirements and also expand the govern- 
ment's surveillance capabilities. First, It would require telecommunications companies 
and ISPs to retain access records and log files (online transactions conducted; Web sites 
visited; time of access; and files downloaded, edited, read, and uploaded) for at least 
three months, along with date and time stamps, telephone numbers of callers and 
receivers, and GPS location Information for 12 months. 10 * 

The National Human Rights Commission of Korea (NHRCK) recommended that a 
number of proposed amendments be removed. Including the Inclusion of GPS Infor- 
mation to locate users. 107 It also questioned the need for additional penalties for tele- 
communication service providers that refuse to comply with requests to provide 
communications records, despite existing provisions allowing Investigators to obtain 
evidence by search and seizure In ordinary Investigations. 110 In 2008, three years after 
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a scandal over the Illegal wiretapping of the cell phones of Influential political figures 
forced them to destroy their equipment, the National Intelligence Service asked for per- 
mission to resume the practice." ' E-mails (after submission and receipt) are already 
considered by law enforcement authorities to be "ob|ects," subject to ordinary search 
and seizure requirements, rather than "means of communications" requiring wiretap- 
ping wan ants and notification to parties within 30 days." 2 

ONI Testing Results 

OpenNet Initiative testing conducted In 2007 and 2008 confirmed that South Korea 
filters political and social content, specifically targeting Web sites containing North 
Korean propaganda or promoting the reunification of North and South Korea, as well 
as a handful of Web sites devoted to gambling. These findings are consistent with 
2006-2007 analysis, with one exception: in 2007 and 2008, Korean ISPs were also 
shown to selectively filter the Korean-language pornography Web sites tested. 

Testing was conducted on three of the largest South Korean ISPs— Id's KorNet. LG 
Dacom, and Hanaro Telecom’s Hananet — from May to August 2008 and in November 
2008. On each ISP, ONI detected DNS tampering, which prevents Internet domain 
names from resolving to their proper IP addresses. All Web sites blocked resolved to a 
block page |olntly hosted by the police and the KCSC 

The ONI determined that a significant number of pro-North Korea or pro-unification 
Web sites on ONI’s testing list were blocked, along with a selected number of gam- 
bling-related Web sites. Tire blocking was extremely consistent across the three ISPs 
tested, although KorNet and LG Dacom blocked more of the same Web sites as com- 
pared to Hananet. 

The ONI testing suggests that the extent of filtering In South Korea Is still not com- 
mensurate with other measures the government has taken to deanse the Korean Web 
of Illegal or harmful social content. At the same time, the relatively low rate of filtering 
Is consistent with the government’s approach to regulating content, which Is far more 
reliant on ordering content and Web-hostlng providers to police their own content 
directly through deletions, suspensions, and takedowns. 

Conclusion 

Although South Korea Is a world leader in Internet and broadband penetration. Its 
citizens do not have access to a free and unfiltered Internet. South Korea's govern- 
ment maintains a wide-ranging approach toward the regulation of spedfic online 
content and Imposes a substantial level of censorship on electlons-rdated discourse 
and on a large number of Web sites that the government deems subversive or socially 
harmful. 
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Introduction 

Countries In the Middle East and North Africa continue to invest In Information tech- 
nology Infrastructure and media pro|ects as part of their strategies to develop local 
economies and create employment. Among the major examples Is Jordan's plan to 
establish a free IT zone In Amman, which will give sales and Income tax breaks to the 
software companies and business development firms based in the zone. The zone is 
part of a strategy designed to Increase the number of Internet users from 26 percent to 
SO percent of the population. It alms to increase employment In the IT sector and to 
boost the sector's revenues from USD 22 billion in 2009 to USD 3 billion by the end 
of2011.' 

In addition to existing regional hubs Dubai Media City and Dubai Internet City, the 
United Arab Emirates (UAE) launched a new content-creation zone to support media 
content creators In the Middle East and North Africa. The new Abu Dhabi-based zone 
alms to employ Arab media professionals In film, broadcast, digital, and publishing. 
Among the partners of the zone are CNN, the BBC, the Financial Times, the Thomson 
Reuters Foundation, and the Thomson Foundation. 2 
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Al the same time, some countries have Initiated efforts to develop Arabic Web con* 
tent. In this regard, Microsoft Is working on translation technology 1 that would make 
the Arabic language more accessible to Internet users, as part of Qatar’s Supreme Coun- 
cil for Information and Communication Technology's Initiative to develop more Web 
sites with Arabic content. 3 

The number of Internet users Is likely to continue to rise, especially with the 
Introduction of technologies that overcome poor information and communication 
technology (ICT| infrastructure that hinders Internet access in the region. WlMAX, 
for example, was commercially available by the end of March 2009 In Algeria, Bahrain, 
Jordan, Kuwait. Saudi Arabia, and Tunisia, while operators in other parts of the region 
have started testing the service. 4 Additionally, broadband markets are growing fast In 
Algeria, Egypt, Morocco, and Tunisia, and commercial 3G mobile services have been 
launched In Egypt, Libya, Morocco, Sudan, Syria, and TUnlsla. 5 

Demographic factors are also expected to contribute to the growth of the Internet 
population. Arab Media Outlook. 2008-2012 states, "Digital media will thrive In the 
Arab market because the market has a large, technologically accomplished demo- 
graphic group — Its youth — who are comfortable with It and will customize It to their 
own requirements." The report also revealed that "over 50% of the population In 
Yemen. Oman, Saudi Arabia, Jordan, Morocco and Egypt are estimated to be currently 
less than 25 years old, while in the rest of the countries the under -25, 'net generation' 
makes up around 35% to 47% of total population."*' 

Liberalization of telecommunications markets has already taken place In several Arab 
countries. Most of the incumbent telecom companies In North Africa are already In 
private hands, with the exception of Algerle Telecom, the privatization of which has 
been postponed because of the global economic crisis. 7 However, experts say telecom 
liberalization In the Middle East and North Africa still lags behind the rest of the world 
In terms of cost and efficiency, a matter which does not encourage direct foreign 
Investment. 8 

The Media Environment 

The Middle East and North Africa Is one of the most heavily censored regions in the 
world. Human nghts watchdogs and free speech advocacy groups continue to criticize 
the media restrictions and repressive legal regimes, and over the past few years, a great 
number of bloggers and cyber dissidents have been |al!ed. 

In April 2009, the International Federation of Journalists called for a radical overhaul 
of media laws In the Middle East, stating that the laws In most of the region's countries 
still permit the tailing of |oumallsts for undermining the reputation of the state, the 
president, the monarch, or religion. Such laws have often been used to suppress report- 
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lng at corruption or scrutiny ol government actions. 1 ' This media environment created 
by authorities has been hostile to bloggers and online activism, resulting In a number 
of arrests across the region. In a list created by the Committee to Protect Journalists of 
the ten worst countries to be a blogger, five countries (Egypt. Syria, Iran, Tunisia, and 
Saudi Arabia) were from the region. 10 

Internet and Media Regulations: The Debate 

The last few years have witnessed an Increase In debates over media and Internet 
censorship In the region. Rifts between censors and local and regional advocates of 
freedom of speech have Intensified, and more voices continue to express concern 
about media regulations in the region. 

Interestingly, while advocates In the region criticize the regimes for repressive regu- 
lations, which limit freedom of speech online, some governments claim they arrest 
bloggers and online activists because they exploit what the regimes call "media free- 
dom.'' In Egypt, for example, the authorities arrested a blogger In May 2009 under the 
accusation of "exploitation of the democratic dlmate prevailing In the country to over- 
throw the regime." The Cairo-based Arab Network for Human Rights Information 
deplored the charges and described them as a black comedy." 

Another example of such a rift Is from the Gulf countries, where the head of the 
Doha Center for Media Freedom criticized Dubai Police for allegedly asking Google to 
censor YouTube. The head of the center was later criticized by Qatar officials as well 
as some journalists and was accused of endorsing pornography, 12 which is a sensitive 
topic In many Middle East and North African societies. 

While it Is common for Internet groups and online activists in the region to organize 
online campaigns to condemn online censorship and arrests of bloggers and online 
writers, other online campaigns that call for and support social censorship — mostly 
online pornography — have emerged In the past few years. For instance, an Arabic 
Web site called Ehjeb (Arabic for the verb "to block") Is becoming Increasingly popular, 
particularly among users of Web forums. The Web site ofiers to facilitate the blocking 
of Web sites by sending user-submitted URLs of questionable content to censors in 
some of the region's countries. Also, some Internet users In North African countries 
where there Is no social filtering have organized online campaigns to demand filtering 
of sexually explicit content. 13 

Pro-censorship advocates and anti-censorship activists have also used the court 
system In their attempts to Implement or remove censorship. For example, a judge in 
Egypt filed a lawsuit requesting the banning of 51 Web sites considered oflenslve. The 
court rejected the lawsuit In December 2007 and emphasized support for freedom of 
expression as long as the Web sites do not harm religious beliefs or public order. 14 
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However, In May 2009 a Cairo court ruled in (avoi of an Egyptian lawyer and ordered 
the Egyptian government to ban access to pornographic Web sites because they are 
deemed offensive to the values of religion and society. 15 

In Tunisia, however, a blogger challenged the Web-filterlng regime In the country by 
filing a legal suit against the Tunisian Internet Agency (ATI) for censoring the social 
networking site Facebook after it was briefly blocked In August 2008. The court dis- 
missed the case In November 2008 without providing any explanation. 15 These exam- 
ples and cases illustrate how the fight over access controls Is taking different and often 
more subtle shapes and forms, and also indicate that different players will continue the 
debate and challenge each other. 

Access Control 

Access controls In the Middle East and North Afnca are multilayered; governments and 
authorities use first- and second-generation measures to regulate Internet access and 
online activities. These measures include laws and regulations, technical filtering, 
physical restrictions, surveillance and monitoring, and harassment and arrests. Among 
the laws and regulations used to control access In the region are the press and publi- 
cation laws, penal codes, emergency laws, antiterrorism laws. Internet-specific laws, 
ISPs' terms and conditions, and telecommunications decrees. 

Press and Publication Laws, Penal Codes, Emergency Laws, and Antiterrorism Bills 

Many countries in the region use restrictive press laws to regulate online publishing and 
traditional journalism. For example, censorship of online media and print journalism 
in Bahrain Is exerted using the 2002 Press Law. 17 Kuwait's 2006 press law allows the 
Imprisonment of journalists for making references to Islam that are deemed Insulting 15 
or for articles seen as "against national interests." 19 Oman’s 1984 Press and Publication 
Law authorizes the government to censor publications deemed politically, culturally, 
or sexually offensive.* 0 Syria's 2001 Press Law sets out sweeping controls over publica- 
tions printed In Syria.* 1 Journalists In Tunisia have been prosecuted by Tunisia's press 
code, which bans offending the president, disturbing order, and publishing what the 
government perceives as false news. 22 Yemen's 1990 Press and Publications Law sub- 
jects publications and broadcast media to broad prohibitions and harsh penalties.** 
The press law In Morocco has been used to suppress outspoken online writers.* 4 

In addition to press codes, some countries often use penal codes to suppress journal- 
ists and online writers. Yemen's Ministry of Information declared In April 2008 that 
the penal code will be used to prosecute writers who publish content on the Internet 
that "Indies hatred" or "harms national Interests." 25 Syria’s penal code criminalizes 
spreading news abroad. 25 Though the Bahraini government In May 2008 Introduced 
amendments to the 2002 press law that eliminate prison sentences for journalists and 
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prior censorship on publlcallons. journalists can still be charged and |alled using the 
penal code and andlerrorlsm law. 27 

In addition to the use of penal and press codes, two countries — Egypt and Syria — 
both of which have been under emergency law for some time, have taken advantage 
of this status to punish Individuals deemed threatening. Egypt's emergency law, in 
force since the declaration of the state of emergency In 1981, grants the government 
powers to search, arrest, and detain Individuals without the supervision of judicial 
bodies. Rights groups say that the uninterrupted application of the emergency law 
since 1981 has led to the emergence of a parallel legal system unchecked by ordinary 
judicial bodies. 28 Similarly, Syria uses the ongoing state of emergency (which began in 
1963) to arrest media workers. 29 

Morocco uses Its antiterrorism bill, passed following suicide bombings in Casablanca 
In 2003, to punish journalists. The bill grants the government sweeping legal power to 
arrest journalists for publishing content deemed to "disrupt public order by Intimida- 
tion, force, violence, fear or terror." 30 

Internet-Specific Laws 

Few countries in the region have Introduced Internet-specific laws to regulate Internet 
activities; among them are the UAE and Saudi Arabia. The UAE's 2007 federal cyber law 
criminalizes hacking, abusing holy shrines or religious rituals, opposing the Islamic 
religion, transcending family principles and values, setting up a Web site for groups 
promoting programs In breach of public decency and order, and setting up a Web site 
or publishing Information for a terrorist group under fake names with Intent to facili- 
tate contacts with their leadership, or to promote their Ideologies and finance their 
activities, or to publish information on how to make explosives or any other sub- 
stances to be used in terrorist attacks. 31 

In January 2008, Saudi Arabia Implemented 16 articles of a new law on the use of 
technology. The law includes penalties of ten years In prison and a fine for Web site 
operators who advocate or support terrorism; three years and a fine for financial fraud 
or invasion of privacy; and five years and a fine for those guilty of distributing pornog- 
raphy or other materials that violate public law, religious values, and social standards 
of the kingdom. Accomplices of the guilty parties and even those who are proven to 
have only Intended to engage In unlawful IT acts can receive up to half of the maxi- 
mum punishments.* 2 

Terms and Conditions of ISPs 

Terms and conditions imposed on users by ISPs are also used to control access In some 
countries. In Oman, for example, Internet use Is regulated by the ISP Omantel's terms 
and conditions, which mandate that users "not carry out any unlawful activities which 
contradict the social, cultural, jiolltlcal, religious or economical values of the Sultanate 
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of Oman or could cause harm lo any third party," as any abuse and misuse of the Inter- 
net services will "result In the termination of the subscription and/or In the proceed- 
ings of Criminal or Civil lawsuits against the Customer."* 3 

Another example is Yemen, where the terms and conditions set by the ISP TeleYemen 
(or Y.h'et) prohibits "sending any message which is offensive on moral, religious, com- 
munal, or political grounds." TeleYemen reserves the right to control access "and data 
stored In the Y.Net system In any manner deemed appropriate by TeleYemen." Section 
6.3.3 cautions subscribers that TeleYemen will report "any use or attempted use of the 
Y.Net service which contravenes any applicable Law of the Republic of Yemen." 3 * 

Telecommunications Laws 

Telecommunications laws are used to control what ISPs can and cannot host. In Alge- 
ria, for example, article 14 of a 1998 telecommunications decree makes ISPs responsible 
for the Web sites they host and requires them to take "all necessary steps to ensure 
constant surveillance" of content to prevent access to "material contrary to public 
order and morality." 14 Bahrain's Telecommunications Law of 2002 contains penalties 
for Illicit use of the Internet, including the transmission of messages that are offensive 
to public policy or morals. 36 In Tlinlsla, the 1998 post and telecommunications law 
enables the authorities to Intercept and check the content of e-mall messages. 37 Elec- 
tronic surveillance such as filtering of e-mall messages of government opponents has 
been reported in Tunisia. 18 

Surveillance and Monitoring 

Measures to monitor Internet activities, particularly In Internet cafes, have been intro- 
duced In many Arab countries. In Algeria, security forces started raiding Internet cafes 
and checking the browsing history of Internet users after terrorist attacks hit the coun- 
try in April 2007. In April 2008, the security forces Increased their monitoring and 
surveillance efforts of Internet cates, and cates were required to collect names and Iden- 
tification numbers of their customers and report this Information, together with any 
suspicious activities, to the police. 39 

Similarly, In March 2008 Iordan began to increase restrictions on the country's Inter- 
net caffs. Cameras were installed in Internet caffs to monitor users, and owners svere 
required to register the IP number of the caff, their users’ personal data, the time of 
use, and the data of Web sites explored. 40 

Additionally, Saudi Arabia’s Ministry of Interior In April 2009 ordered Internet caffs 
to install hidden cameras and provide a record of names and identities of their cus- 
tomers.* 1 In Kuwait, Internet caff owners also were required to maintain a record 
of customers' names and Identifications, which they must submit to the Ministry of 
Communications upon request. 42 
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Some Internet cate operatois In Lebanon admit that they* use computer surveillance 
software that enables them to monitor the desktops and browsing habits of their 
clients under the pretext of protecting the security of their computer networks or to 
stop their clients from accessing pornography. 43 However, there Is no evidence that 
the government orders these measures. 

In March 2008, the Syrian authorities ordered Internet cafe users to provide their 
names, Identification cards, and the times they use the Internet cafe to cafe owners, 
who will consequently present them to the authorities. 44 

In October 2007, police In Yemen ordered some Internet cates to close at midnight 
and demanded that users show their Identification cards to the cate operator. 44 Some 
owners use surveillance software to monitor the online activities of their customers 
and refuse access to clients who access pornography. 4 * 

In August 2008, Egyptian authorities Imposed new monitoring measures by demand- 
ing that Internet caff clients must provide their names, e-mail addresses, and tele- 
phone numbers before they can use the Internet. Once the data are provided, clients 
will receive a text message on their cell phones and a PIN number that they can use 
to access the Internet. 47 

In addition to the preceding measures, some countries Impose physical restrictions 
on Internet caffs as part of their monitoring efforts. For example, Yemen 48 and 
Oman 49 require that computer screens in Internet cates must be visible to the floor 
supervisor. No dosed rooms or curtains that might obstruct the view of the monitors 
are allowed. 

Technical filtering 

The OpenNet Initiative conducted tests for technical Internet filtertng in all the coun- 
tries in the Middle East and North Africa between 2008 and 2009. Test results prove 
that the governments and ISPs censor content deemed politically sensitive; critical of 
governments, leaders, or ruling families; morally offensive; or In violation of public 
ethics and order. 

Testing also revealed that political filtering continues to be the common de- 
nominator across the region. Many states in the Middle East and North Africa pre- 
vent their citizens from accessing political content or have blocked such content 
In the past For example, Bahrain, Qatar, Jordan, Iran, United Arab Emirates, Syria, 
Saudi Arabia, Morocco, Libya, and Tunisia have censored Web sites containing con- 
tent critical of governments and leaders, Web sites that claim human rights viola- 
tions, and/or Web sites of opposition groups. Mauntanla bnefly blocked the news 
Web site Taqadoumy. and Egypt at one point blocked the Web site of the Islamic 
opposition group Muslim Brotherhood, as well as the Web site of the Labor Party's 
newspaper. 
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To one degree oi another, the Gulf countries, Sudan, Tunisia, Gaza, Yemen, and Iran 
censor pornography, nudity, gay and lesbian content, escort and dating services, and 
Web sites displaying provocative attire. Also censored by most of these countries are 
Web sites that present critical reslews of Islam and/or attempt to convert Muslims to 
other religions. Some of these countries also filter Web sites related to alcohol, gam- 
bling, and drugs. 

Generally, the countdes that implement political or social filtenng also target to 
various degrees proxies and circumvention tools to prevent users from bypassing fil- 
ters. Some of these countries also block online translation services and privacy tools, 
apparently because they can also be used to access blocked content 

Testing by ONI revealed no evidence of technical filtering In Algeria, Iraq, Lebanon, 
and the West Bank between 2008 and 2009. 

Regional Trends In Access Control 

Internet censorship In the Middle East and North Africa Is on the rise, and the scope 
and depth of filtering are Increasing. Previous ONI tests revealed that political filtenng 
was limited In some countries, but 2008-2009 results Indicate that political censorship 
is targeting more content and Is becoming more consistent. For example, previous tests 
found that Yemen temporarily blocked political Web sites In the run-up to the 2006 
presidential elections, and Bahrain did the same ahead of parliamentary elections. 
However, 2008-2009 testing revealed that filtenng In these two countnes has been 
consistently extended to Include several Web sites run by opposition groups or news 
Web sites and forums that espouse oppositional political views. 

In the meantime, countries that have been filtering political content continue to add 
more Web sites to their political blacklists. For example, filtenng in Syria was expanded 
to Include popular Web sites such as YouTube, Facebook, and Amazon, as well as more 
Web sites affiliated with the Muslim Brotherhood and Kurdish opposition groups. An- 
other example Is Tunisia, which added more political and oppositional content as well 
as other apolitical Web sites such as the OpenNet Initiative and Global Voices Online. 

Social filtenng Is also Increasing and Is catching up with the continuously growing 
social Web. Testing revealed that most of the Arab countries have begun blocking 
Arable-language explicit content that was previously accessible. Interestingly, filtenng 
of Arable-language explicit Web content In the Middle East and North Africa Is usually 
not as fast as that of other languages. The ONI Investigation revealed that the U.S.- 
based commercial filtering software used by most of the ISPs In the region (e.g., Smart- 
Filter, Web sense, and Bluecoat) do not pick up Arabic content as comprehensively as 
content In other languages. 

Increases In filtering are the norm in the Middle East and North Afrtca, and lifting 
blocks Is the exception. Among the few examples of the unblocking of Web sites are 
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Syria’s restoration of access to WUapedla Arabic, Morocco's lifting of a ban on a few 
pro- Weslern-Sah aia-lndependence Web sites, and Libya’s allowing access to some pre- 
viously’ banned political Web sites. Sudan's bitering of gay and lesbian, dating, provoc- 
ative attire, and health-related Web sites was also more limited compared to previous 
test results. 

Another regional trend toward second-generation controls Is that more Arab coun- 
tries are Introducing regulations to make Web publishing subject to press and publica- 
tion laws, and are requiring local Web sites to register with the authorities before they 
can go live. In Jordan in September 2007, for example, the country’s Legislation Bureau 
in the Prime Minister's Office Issued a decision that Web sites and electronic press must 
comply with the provisions of the publications and publishing law and fall under the 
oversight of the Publications and Publishing Department, which announced that It 
would exercise Immediate supervision and censorship. 

Another example Is Saudi Arabia, which announced In May 2009 plans to enact leg- 
islation for newspapers and Web sites that will require Saudi-based Web sites to get of- 
ficial licenses from a special agency under the purview of the Ministry of Information. 

Bahrain already has a similar system that requires local Web sites to register with the 
Ministry of Information. 

Among the new trends In controlling access through second-generation methods Is 
the Increase in Incidents of hacking of opposition and dissident Web sites and blogs. 
Such Incidents have been reported In Tunisia and Yemen. On the other hand, sectarian 
cyber attacks among different religious groups in the region, namely Shiite and Sunni 
groups, have occurred in the past few years. Tire cyber attacks managed to deface the 
Web sites of significant Shiite and Sunni organizations and individuals, and In some 
cases the attackers managed to remove content from some of these Web sites. Addi- 
tionally, Israeli, Palestinian, and Lebanese Web sites run by Hezbollah have been tar- 
gets of attacks, especially during conflicts. 

Conclusion 

Governments In the Middle East and North Africa continue to Invest In media and IT 
projects, and at the same time are continuing to invest in censorship technologies to 
prevent their citizens from accessing a wide range of objectionable content. Also, while 
Western companies build 1CT Infrastructure necessary for development In the region, 
other Western companies provide the censors with technologies and data used to filter 
the Internet. 

First- and second-generation access controls are evident throughout the Middle 
East and North Africa. Censors In the region attempt to control political content using 
technical filtering, laws and regulations, surveillance and monitoring, physical restric- 
tions, and extralegal harassment and arrests. Filtering of content deemed offensive 
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for religious, moral, and cultural reasons Is pervasive In many countries, and Is 
growing. 

Though many governments acknowledge social filtering, most continue to disguise 
their political filtering practices by attempting to confuse users with various error 
messages. 

The absence of technical filtering in some countries in the region by no means Indi- 
cates free online environments In those countries; surveillance and monitoring prac- 
tices and extralegal harassment from security agencies create a climate of fear used to 
silence online dissidents and conform to second-generation controls found elsewhere 
In the world. 

Many ISPs block popular politically neutral online services such as online transla- 
tion services and privacy tools, fearing that they can be used to bypass the filtering 
regimes. The censors also overblock Web sites and services such as social networking 
sites and photo and video sharing sites because of the potential for content considered 
objectionable. 

More users in the Middle East and North Africa are using the Internet for political 
campaigning and social activism; however, states continue to Introduce more restric- 
tive legal, technical, and monitoring measures, amid growing local and regional calls 
to ease restrictions and remove barriers to the free flow of information. 
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Egypt 




There Is no evidence of Internet filter- 
ing In Egypt, although a small group 
of politically sensitive Web sites have 
been blocked In the past. Tire author- 
ities have Increased their crackdown 
on online writers and bloggers and 
have harassed and detained them for 
their online activities. Surveillance 
efforts have also Increased. Similar to 
second-generation controls found else- 
where in the world. Egypt has used broad national security laws to justify restric- 
tions on new media services, such as satellite television and cellular phones. 



Background 

Egypt has amended Its constitution to allow opposition parties to contest presidential 
polls, but potential candidates face restrictive criteria for participation. Political reform 
activists have become more outspoken and have organized street protests In defiance 
of an emergency law In force since 1981.* 

The emergency laws grant the government the power to search, arrest, and detain 
individuals without the supervision of judicial bodies. Rights groups state that the 
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1 KEY INDICATORS ] 

COP per capita. PPP (constant 2005 international dollars) 

5,052 

Life expectancy at birth (years) 

71 

Literacy rate (percent of people age 15+) 

66 

Human development index (out erf 1 79) 

116 

Rule erf law (out of 211) 

101 

Voice and accountability (out erf 209) 

184 

Democracy index (out of 167) 

119 (Authoritarian regime) 

Digital opportunity index (out of 181) 

91 

Internet users (percent erf popciation) 

15.4 


Source by indicator World Bank 2009a, World Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economist Intelligence Unit 2008, ITU 2007, ITU 2008. 


uninterrupted application of emergency laws has led to the emergence of a parallel le- 
gal system, one that Is unchecked by ordinary |udlclal bodies. 2 Despite this, |oumallsts 
now openly criticize the regime's policies, and both private and opposition media have 
started to break taboos despite |udlclal, bureaucratic, and economic pressure against 
them.- 1 

Egypt was listed by the Committee to Protect Journalists as one of the top ten worst 
countries to be a blogger, because the authorities monitor Internet activity on a regular 
basis and have detained a large number of active bloggers (more than 100 In 2008 
alone) for open-ended periods* Nevertheless, Egyptian bloggers and online activists 
have managed to utilize the power of the Internet to organize street protests and to 
expose human rights violations in Egypt. For example, two government officials were 
arrested and Imprisoned In November 2007 for torturing prisoners after video clips of 
their actions were posted on the Internet by online activists. 5 

Internet In Egypt 

Egypt has become a leading Internet market in Africa in terms of users. International 
bandwidth, and services offered. Also, unlike in many Arab countries, the International 
bandwidth market and VoIP telephony have been liberalized, and more than 200 
Internet and data service providers operate In Egypt, making ADSL services among the 
least expensive In Africa.® The ICT sector continues to grow — Egypt’s spending on 
Information and communication technology (ICT) reached USD 9.8 billion In 2008 
and Is expected to rise to USD 13.S billion by 2011. 7 

As part of the Egyptian government's ambitious program to expand access to ICT, an 
agreement to spread personal computers to every home was signed In August 2008 
among the Ministry of Communications and Information Technology’ (MCTI), the 
National Telecommunications Regulatory Authority ( NTRA), the Egyptian National 
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Post Organization (ENPO), and the Computer and Software Department at the Federa- 
tion of Egyptian Chambers of Commerce. The agreement Is the second phase of a 2002 
Initiative and Is part of the MCITs strategy of spreading the practice and utilization 
of TT tools and the Internet to all social segments in Egypt, focusing on remote areas 
and limited-income families. The Initiative will include offering Integrated packages of 
personal computers and 512 Kbps ADSL subscriptions for three years for monthly 
Installments. 8 

Furthermore, telecommunications companies continue to enable users to access 
Internet content. For example, Egypt's telecommunications giant Vodafone, which 
has 15 million subscribers, announced in August 2008 Its Intention to buy a ma|orlty 
stake In content provider Sarmady Communications (Sarcom) in an attempt to boost 
Its Internet service by providing content to Its customers, which Is also part of a strat- 
egy to dominate the Internet market. 9 

Egypt’ s monopoly fixed-line telephone company, Telecom Egypt, owns a 45 percent 
stake In Vodafone Egypt and had 11.3 million fixed-line subscribers at the end of June 
2008. Other Egyptian mobile operators pay Telecom Egypt for use of Its network for 
mobile to fixed-line calls and for international calls. Egypt's plans to sell a second 
fixed-line license In September 2008 would end Telecom Egypt's monopoly. 10 

Almost a million Egyptian households have access to broadband, thanks to sharing 
of ADSL lines. In fact, 63.4 percent of Egyptian households share connections with 
their neighbors. In 81.9 percent of households that share lines, the connection Is 
shared with more than three other households. Egypt had 427,085 ADSL lines by the 
end of 2007. It is estimated that 75 percent of those are residential ADSL fines. Among 
Egyptian Internet users, 81.2 percent state a preference for browsing Arable-language 
Web sites. Internet cafes remain an Important source of connectivity for Egyptians, 
with 27.8 percent of Internet users reporting they use Internet cafe services." 

The number of blogs In Egypt has risen from |ust 40 In 2004 to an estimated 160,000 
In July 2008, according to a report released by the Egyptian Cabinet's Information and 
Decision Support Center (1DSCJ. Of these Egyptian bloggers, 76.8 percent write in 
Arabic, 20.8 percent in mixed Arabic and English, and 9.6 percent solely in English. 
Egyptian blogs account for more than 30 percent of all Arabic blogs. Most of the blog- 
gers are young men In their 20s, 27 percent are female, and over half of all bloggers are 
between the ages of 20 and 30." 

Legal and Regulatory Frameworks 

The government continues to stifle freedom of the press and restricts the flow of in- 
formation. For example. It proposed a draft bill on audiovisual media that critics say 
Is aimed at cracking down on dissent and opposition voices on television and the 
Internet across the region. 11 The bill requires journalists and broadcasters to avoid 
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damaging "social peace," "national unity," "public order," and "public values." Viola- 
tors ol the rules face Imprisonment, cancellation of broadcasting licenses, confiscation 
of equipment, and fines. 1 * Hie bill will create a National Agency for Regulation of 
Audio and Visual Broadcast to enforce the Implementation of the proposed rules. Hie 
agency will be composed of representatives from national security and military Intelli- 
gence entitles. This draft bill coincides with an increase In the closure of television 
channels by the government. ,s 

The Egyptian government enforced media licensing laws to punish an Egyptian 
satellite company for broadcasting protest footage of antigovernment demonstrations 
In April 2008. 16 The company was later shut down. This incident came a few weeks 
after three other satellite channels were dropped by Egypt's state-controlled Nllesat 
satellite. 1 7 

As the Egyptian blogosphere continues to grow, so too does the government's crack- 
down on bloggers and Internet users. For example, blogger Abdel Kareem Nabll Sulei- 
man Amer ("Kareem Amer") was sentenced to four years In prison In February 2007 for 
"Incitement to hatred of Islam" on his blog and for Insulting Egyptian President Hosnl 
Mubarak. He became a symbol of online repression for the country's bloggers. 18 Other 
Egyptian bloggers have been arrested for their online activities and some were sen- 
tenced to prison. One of the most recent examples Is blogger Mohamed Refaat. editor 
of the blog Matabbat (matabbat.blogspot.com), who was arrested In August 2008 
under the state emergency law. 19 He was accused of "offending the state Institutions, 
destabilizing public security, and Inciting others to demonstrate and strike via the 
Internet."* 0 

The Egyptian authorities have also taken measures to restrict the potential use of 
cell phones for activism. Under the pretext of protecting public security, the Egyptian 
government asked cell phone companies to block service to anonymous subscribers In 
May 2008. 21 Reuters reported that "the move comes as Egypt tiles to combat a wave 
of public discontent over rising prices and low wages that have sparked a series of 
labor and anti-government strikes, organized largely by mobile phone and over the 
Internet." 22 

In a landmark legal case, an administrative court In December 2007 rejected a law- 
suit brought by a |udge calling for the banning of 51 Web sites In Egypt. Hie court 
emphasized Its support for freedom of expression as long as such Web sites did not 
harm fundamental beliefs or public order. 21 However, in May 2009, a Cairo court ruled 
that the Egyptian government must ban access to pornographic Web sites because they 
are deemed offensive to religion and society's values. 24 The suit was filed by a lawyer 
who claimed that a recent case of an Egyptian couple who were sentenced to prison 
for starting a swingers dub over the Internet highlighted what he called "the dangers 
posed by such offensive Web sites." 25 It remains to be seen whether the authorities will 
enforce this court order. 
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Surveillance 

Despite the government's Initiatives to encouiage Internet use. the Egyptian author- 
ities continue to place restrictions on how Egyptians use the Internet. In February 
2G0S, for example, Egypt's Ministry of Interior ordered Internet cafe managers and 
owners to record their customers’ names and Identification numbers and threatened 
to close the cafes If they refused to Implement the order. This kind of action was con- 
demned by a Cairo-based human rights group, which descnbed It as "a gross violation 
to the right to privacy."** 

In August 2008, the Egyptian authorities Imposed new measures that Increased the 
extent of censorship on Internet users by demanding that Internet caff customers be 
required to provide their names, e-matl addresses, and telephone numbers before they 
could use the Internet. Once the data were provided, customers would then receive a 
text message on their cell phones with a personal Identification number (PIN) that 
they could use to access the Internet. A Cairo-based human rights group, the Arabic 
Network for Human Rights Information, considered these requirements to be censor- 
ship procedures.* 7 

Egypt has witnessed an increase in the use of Facebook for social activism, which 
alerted the government to the potential force of the social networking site. 28 As a 
result, there were rumors that It might be blocked, especially after a group of activists 
managed to recruit supporters using Facebook for a general strike that took place on 
April 6, 2008, protesting against rising food prices and President Mubarak's govern- 
ment. 2 * Another opinion suggested that the authorities would rather leave Facebook 
accessible so that they could trace back suspect online activities to the Individuals 
responsible and punish them. 30 Because of the Increasing use of Facebook for political 
activism In Egypt, activists have reported that the government has started to monitor 
the social networking site for the organization of any possible activities similar to that 
of April 6, 2008. The vice chairman of Egypt's El Chad opposition party, Wael Nawara, 
said, "The word Is that there Is even a special division called the State Security Investi- 
gation Police for Facebook." 3 ' 

In addition to monitoring online activism, a constitutional reform approved by par- 
liament In March 2007 gave authorities the power to spy on the correspondence of 
suspected terrorists and to tap their telephones without a court order. 3 * In fact, Voda- 
fone’s global head of content standards, Annie Mullins, revealed In February 2009 that 
Vodafone handed over communications data to the Egyptian authorities In response to 
government demands. This data may have been used to help identify rioters who were 
protesting over the bread crisis, which erupted In the Egyptian town of Mahallah el- 
Hubra In Apnl 2008. During the demonstrations, many protesters carried cell phones, 
using them to call friends and send text messages. On December 22, Individuals were 
convicted In connection with the food riots 33 



Interestingly, Egypt's minister of telecommunications and information technology 
publicly admitted that he allowed the security offices to monitor, record, and tap fixed 
lines and cell phones. A member of parliament considered this access unconstitutional 
and a violation of human rights. 34 

Egyptian telecommunications law mandates that telecom operators and providers 
shall provide, at their own expense, equipment and software that enable the armed 
forces and national security entitles to exercise their powers within the law. 34 

ONI Testing Results 

OpenNet Initiative in-country tests in 2008-2009 were conducted using the ISPs Link 
Egypt and TEData. As in previous testing. ONI found no evidence of Internet filtenng 
in Egypt. 

In 2005, most ISPs blocked the official Web site of the Muslim Brotherhood 
(www.lkhwanonbne.com), Egypt's largest opposition movement. At one time, the 
popular ISP LINKdotNET blocked wwsv.alshaab.com, the Web site of the Labor Party's 
biweekly newsletter; It no longer does so. 3 ® 

A number of ISPs offer optional filters to block pornography. The ISP TEData, for 
example, offers Internet services with "content control," which eliminates "aU of the 
Internet's indecent content that might affect your children." 37 

Conclusion 

Egypt has become a leading Internet market In Africa, and Internet users en|oy un- 
filtered access to the Internet. However, the May 2009 court order to Mock access to 
pornography online might result in a shift In filtering policy. The government moni- 
tors onUne activities and has Increased Its surveillance efforts. Egyptian bloggers con- 
tinue to use the Internet for onUne activism, which continues to result In government 
harassment, arrests, and Intimidation. Current legislation aUows (all terms for (ournal- 
lsts, editors, and online writers. Including bloggers. 
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The Islamic Republic of Iran continues 
to expand and consolidate Its techni- 
cal filtering system, which Is among 
the most extensive In the world. A cen- 
tralized system for Internet filtering 
has been Implemented that augments 
the filtering conducted at the Internet 
service provider (ISP) level. Iran now 
employs domestically produced tech- 
nology for Identifying and blocking 

objectionable Web sites, reducing Its reliance on Western filtering technologies. 
The regulatory agencies In Iran charged with policing the Internet continue to 
expand. The Revolutionary Guard has begun to play an active role In enforcing 
Internet content standards. In conjunction with expansive surveillance, this In- 
crease In regulatory attention exacerbates an online atmosphere that promotes 
self-censorship and discourages dissenting views. The blocking of political Web 
sites during the 2009 presidential elections energized opposition to Internet cen- 
sorship within Iran and has brought fresh attention to the Issue of press controls. 



Background 

Speech In the Islamic Republic of Iran Is heavily regulated. The limits on freedom of 
expression In Iran are grounded in the constitution, and speech restrictions extend 
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1 KEY INDICATORS [| 

COP per capita, PPP (constant 2005 international dollars) 

10,346 

L Me expectancy at birth (years) 

71 

Literacy rate (percent of people age 15+) 

82 

Human development index (out of 1 79) 

84 

Rule erf law (out of 211) 

165 

Voice and accountably (out of 209) 

191 

Democracy index (out of 167) 

145 (Authoritarian regime) 

Digital opportunity index (out of 181) 

105 

Internet users (percent of population) 

31.3 


Source by Indicator World Bank 2009a, World Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economist Intelligence Unit 2008, ITU 2007, ITU 2008. 


over a broad range of topics, Including religion, immorality, social harmony, and poli- 
tics. In comparison to the well-developed state controls over print media, radio, and 
television, the Internet Initially offered a relatively unfettered medium for communica- 
tion In Iran, allowing independent media and opposition voices to flourish.' The Inter- 
net also has provided Iranian expatriates a platform for publishing opinions In 
opposition to the government, such as pro-secular and reformist political viewpoints, 
outside the reach of standard offline strategies for enforcing speech restrictions. The 
growing popularity of the Internet has led to Increasing government scrutiny. Dissent- 
ing voices online, including human rights activists, bloggers, and online media outlets, 
have became the target of government regulatory action and are sub|ect to arrest, 
Imprisonment, and torture. 2 Internet control mechanisms have continued to grow in 
scope and scale to address this digital challenge to Information control in Iran. Regula- 
tors have Invested In more sophisticated technical control mechanisms, and new regu- 
latory agencies have been created to identify and block expression deemed offensive. 
The presidential elections In 2009 led to an Increase In online political organizing, 
which provided a further Impetus for Increasingly contentious controls on the Web 
sites used by legitimate opposition contenders. 

Efforts to control online speech by the Iranian government have relied primarily on 
large-scale Internet Altering and the threat of targeted legal action. The declaration of a 
spokesman from the Revolutionary Guard to launch 10,000 blogs written by members 
of the Basl|, a volunteer Iranian paramilitary force under the authority of the Iranian 
Revolutionary Guards, hints at the adoption of a different strategy for shaping online 
Information: a government-backed war of words on the Internet. 3 This Is similar con- 
ceptually’ to the government Information dissemination strategies seen in |ust a small 
number of countries — for example, the Fifty Cent Ftnty In China, where workers are re- 
portedly paid for producing progovemment content, and In Russia, where pro-Kremlln 
bloggers are suspected of receiving government support.* 




Internet In Iran 


Internet usage In Iran continues to Increase at a sharp rate. Over the past eight years, 
the number of Internet users In Iran has growth at an average annual rate of approxi- 
mately -48 percent, increasing from under 1 million Internet users In 2000 s to around 
23 million In 2008.*' This rate of growth Is higher than any other country In the Middle 
East. Internet users now account for approximately 31.3 percent of the population of 
Iran. This Internet penetration rate Is considerably higher than the Middle East average 
of 23 percent.' 

The Persian blogosphere has been heralded as one of the largest and most active in 
the world. The number of active Persian blogs is estimated to be approximately 
60,000 — a formidable number of Independent voices for a country accustomed to 
tightly controlling the press. 8 

Iranian Internet policies reflect a strong tension between the regulatory urge to reign 
In free speech and the promotion of innovation and economic growth supported by 
expanding access to Information and communication technologies (ICT). Bolstered by 
the strong growth In Internet penetration in Iran, Iran's Fourth Five-Year Development 
Plan called for enhanced broadband penetration, with l.S million high-speed Internet 
connections nationwide.' However, in October 2006, the Ministry of Information and 
Communications Technology (MICI) Issued an order that appears to have been 
designed to thwart household access to broadband Internet, forbidding ISPs from pro- 
viding Internet connectivity to households and public Internet access points at speeds 
greater than 128 Kbps. This policy, which restricts the ability of Internet users to down- 
load multimedia content. Is likely Intended to Inhibit online alternative media sources 
that might compete with the tightly controlled radio and television media in Iran and 
to hinder access to alternative media sources. 10 

At the time of this order, approximately 250,000 users had access to high-speed 
Internet service, with demand continuing to grow." Over the prior two years, 1 1 com- 
panies had been licensed to provide such high-speed services and had invested signifi- 
cant capital In Importing the required machinery and setting up the required 
Infrastructure. These regulations on Internet access speed were met with Intense oppo- 
sition, Including a campaign to overturn the policy by members of parliament. 12 
Reports at the time suggested that the restrictions wxtuld be lifted once more effective 
content control mechanisms were put Into place. However, the ban on high-speed ser- 
vice for households and public access points remains In place, although universities 
and private businesses are able to obtain high-speed broadband service. Before this 
policy was enacted, fiber-optic networks had been expanding rapidly in Iran, more 
than doubling from 200S to 2007.'* The growth of fiber-optic networks In Iran has 
since dropped off precipitously. 14 Mohammad Solelmani, Minister of Information and 
Communications, publicly defended the celling on access speeds and Indicated that 



slower speeds are adequate and that there Is no demand for higher speeds. 14 Iran Is the 
only country In the world to have Instituted an explicit cap on Internet access speed 
for households. 

Efforts to gain control over the Internet were already under way In 2001, when the 
government of Iran asserted control over all Internet access points coming into the 
country. 1 ' 1 Commercial ISPs in Iran that offer Internet connectivity to the public are 
required to connect through the state-controlled Telecommunication Company of 
Iran (TCI). 17 OpenNet Initiative research conoborates that ISPs offering Internet ser- 
vice to the public all connect through TCI. The other International connections to the 
Internet are associated with research and academic organizations. Designing the Inter- 
net Infrastructure around a government-managed gateway — rare for a country with 
this many Internet users — offers a central point of control that facilitates the Imple- 
mentation of Internet filtering and monitoring of Internet use. 

Legal and Regulatory Frameworks 

Speech regulation In Iran Is rooted in Its constitution, which declares that "the media 
should be used as a forum for healthy encounter of different Ideas, but they must 
strictly refrain from diffusion and propagation of destructive and antl-Islamtc prac- 
tices." 18 Applying these principles to the Internet has proven to be difficult. A number 
of government regulatory Initiatives have been launched over the past decade to assert 
control over online communications, although the legal status of Web sites and blogs 
continues to be contested. 

The legal and institutional basis for the technical filtering system In Iran grew out of 
a series of decrees passed down by the Supreme Council of the Cultural Revolution 
(SCRC) in December 2001 that required ISPs to employ filtenng systems. 19 An Inter- 
agency committee, the Committee in Charge of Determining Unauthorized Sites 
(CCDUS), was set up a year later to set criteria for Identifying unauthorized Web 
sites to be blocked.** Tills committee also deckles on the blocking of specific domains. 
The SCRC Issues guidelines to this committee and oversees committee members, who 
include representatives of MICT, the Ministry of Culture and Islamic Guidance 
(MCIG), the Ministry of Intelligence and National Security, and the Tehran Prosecutor 
General.* 1 

The Implementation of the filtering decisions Is charged to a filtering division within 
the Information Technology Company of Iran (FTC), an agency under MICT. 22 An- 
other agency, the Communication Infrastructure Company, has been given the task 
of unifying filtenng across Iran. 2 * 

Iran has promoted the development of domestic tools and technical capacity to carry 
out Internet filtering In order to reduce Its reliance on Western technologies. Pttor ONI 
research reported the use of SmanFUter, a product of the U.S.-based firm Secure Com- 



putlng. for filtering Internet content.** Secure Computing denied any knowledge of 
the use of their products In Iran. 24 The use of Western technology was problematic 
for both the companies Involved and the Iranian government. For the companies. 
Involvement in Internet censorship In Iran was a public relations liability, as they 
were slewed as contributing to the suppression of legitimate speech. If not breaking 
U.S. law by violating trade sanctions against Iran. For the Iranian government, the reli- 
ance on Western technologies was seen as a source of weakness and a potential vulner- 
ability for the integrity of the Iranian Internet. Some within Iran were concerned that 
Western software might Include a "backdoor’' that would give outsiders access to key 
Infrastructure. 2 * 

Several Iranian technology companies are now producing hardware and software 
products for use In the Iranian filtering system. 27 Domestically produced technology 
Is currently used for filtering. Iranian technology Is also used for searching the Internet 
for objectionable content and tracking keywords and links to banned Web sites, which 
are used by filtering authorities to make blocking decisions. 28 With the emergence of 
this domestic technical capacity’, Iran |olns China as the only countries that aggres- 
sively filter the Internet using their own technology. 

The legal structures for enforcing speech restrictions In Iran are ambitious In their 
reach and olfer authorities several alternatives for targeting objectionable speech and 
Implementing the wide mandate to curtail a broad range of Impermissible speech 
In Iran. Significant ambiguity in the statutes and directives used to regulate speech in 
Iran leaves the agencies charged with executing these laws with broad discretionary 
powers. 

The Press Law of 1986 Is the principal instrument for regulating media in Iran and 
frames the boundaries of permissible speech by media. This legislation Is unusual in 
that It not only describes restricted speech but also lays out normative objectives for 
the press, who are required to "propagate and promote genuine Islamic culture and 
sound ethical principles." 24 ’ The Press Law outlines broad restrictions on speech, 
including prohibitions on "promoting subjects that might damage the foundation of 
the Islamic Republic ... offending the Leader of the Revolution ... or quoting articles 
from the deviant press, parties or groups that oppose Islam (Inside and outside the 
country) In such a manner as to propagate such Ideas ... or encouraging and Insti- 
gating individuals and groups to act against the security, dignity and Interests of the 
Islamic Republic of Iran.” 30 Other provisions prohibit Insulting Islam or senior reli- 
gious authorities. 11 

The application of this law to Web sites and blogs In Iran has been contested. An 
amendment to the Press Law In 2000 appears to have brought electronic publications 
under the aegis of the law. 12 In April 2009, another amendment to the Press Law was 
passed by the Iranian parliament that could facilitate the application of Press Law to 
online sources of content. The 2009 amendment stipulates that "the rules stated in 



this Press Law apply to domestic news sites and domestic websites and set out their 
nghts, responsibilities, legal protection, crimes, punishments, judicial authority and 
procedure for hearings." 3 * This article, which was rejected a year earlier when proposed 
to the previous parliament, was reportedly passed this time with strong pressure from 
the government of President Mahmoud Ahmadlnejad. 34 Given the ambiguous word- 
ing of the April 2009 amendment to the Press Law, critics say that personal Web sites 
and blogs may also fall within the new definition, allowing greater scope for Inhibiting 
freedom of expression on the Internet. The government claims that the law now 
applies to all "Internet publications."** 

As applied to Web sites and blogs, the Press Law would not only subject online con- 
tent to the comprehensive set of speech restrictions In the law. but also require Web 
sites to obtain a license prior to publication. Bloggers and online media sources would 
also be sub|ect to the regulatory authority of the Press Supervisory Board under the 
Ministry of Islamic Culture and Guidance (M1CG), which has the power to revoke 
licenses, ban publications, and refer complaints to a special Press Court. 34 

Internet "publications" that do not obtain a license under the Press Law, however, 
are subject to the stricter general laws of the Penal Code and come under the jurisdic- 
tion of the general courts. The Penal Code incorporates content-based crimes such as 
propaganda against the state and allows for the death penalty or Imprisonment of up 
to five years for speech deemed to be an "Insult to religion." 37 Additional punishable 
offenses include creating "anxiety’ and unease In the public's mind," spreading "false 
rumors," or writing about "acts which are not true." Another provision criminalizes 
criticism of state officials. Cases heard In the general courts do not has’e the benefit of 
a jury trial, which Is used only In the Press Courts, Increasing the risk for those that opt 
not to register their Web site or blog. 

Both supporters and critics of the 2009 amendment to the Press Law agree that 
Implementing these new provisions Is beyond the capacity of current regulatory 
agencies. Critics suspect that the proximity of the law’s approval to the 2009 elections 
was linked to the Incumbent president’s desire to limit the Influence of reformist can- 
didates In cyberspace. 38 

Authorities in Iran have struggled for many years with the challenges of regulating 
speech on the Internet, complicated by the relative ease of anonymous speech online 
and access to content hosted outside the country. Internet service proslders and sub- 
scnbers are subject to prohibitions on 20 types of acdsltles, where Insulting Islam and 
religious leaders and Institutions, as well as fomenting national discord and promoting 
drug use or obscenity and Immoral behaviors, are prominent. 39 In 2006, a directive of 
the SCRC declared Web sites and blogs that did not obtain a license from the MICG to 
be illegal. 40 The MICG Issued a notice In January 2007 requldng registration by March 
1, 2007. A Telecommunications Ministry officlaL however, indicated that enforcement 
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was not feasible*' The number of blogs that have registered with the state Is thought 
to be very low.* 2 

Another key piece of legislation for regulating online content In Iran Is the BUI of 
Cyber Crimes’ Sanctions (Cyber Crimes BUI) ratified into law in November 2008. This 
bill was still under review by the Guardian Council at the time of writing. 45 The bUl 
requires ISPs to ensure that "forbidden" content Is not displayed on their servers, that 
they Immediately Inform law enforcement agencies of violations, that they retain the 
content as evidence, and that they restrict access to the prohibited content** Under 
the Cyber Crimes BUL ISP 5 that do not abide by government regulations (including 
filtenng regulations) will be fined, and with subsequent offenses temporarily or perma- 
nently suspended.* 5 The blU also Includes provisions for the protection and disclosure 
of confidential data and Information as weU as the publishing of obscene content.* 6 A 
prior draft of the legislation Included provisions that made ISPs criminally liable for 
content transmitted over their networks. These provisions have been removed from 
the latest draft of the Cyber Crimes BUl. 

The role of different government agencies In deciding on blocking, and the legality 
of doing so, has been a point of contention. The Internet Bureau of the Judiciary has 
Issued mandates to ISPs to block Web sites through court orders, which are considered 
a form of lawful punishment Imposed on legal entitles.* 2 Tehran Prosecutor General 
Saeed Mortazavl, who has led harsh crackdowns on media and has also been Impli- 
cated In cases of torture of detainees, Including 21 bloggers arrested In 2004, has also 
ordered that certain sites be censored.* 8 

The legality of Iran’s filtenng regime was brought Into question following the block- 
ing of the conservative online Journal Baztab (formerly baztab.com) In February 2007. 
Baztab was made accessible Inside Iran again after the Supreme Court of Iran ruled 
against the filtenng of the Web site.*” This incident sparked a debate within Iranian 
legal and media circles over the authortty of the CCDUS and whether as an executive 
body of government It was improperly involved In making legislative or |udlclal deci- 
sions. 5 ® This debate did not forestaU the eventual dosing of the offices of Baztab. 5 ' 

Surveillance 

Iran Is reportedly Investing In improving Its technical capacity to extensively monitor 
the behavior of Its citizens on the Internet. The routing of Internet traffic through 
proxy servers offers the potential for monitoring and logging essendaUy all unen- 
crypted Web traffic. Including e-mail. Instant messaging, and browsing. The architec- 
ture of the Iranian Internet Is particularly conducive to widespread surveillance, as all 
traffic from the dozens of ISPs serving households Is routed through the state- 
controlled telecommunications Infrastructure of TCI. The M1CT, when announcing 
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the creation of a centralized filtering system, Indicated that they would keep a record of 
Web sites visited by users. A later statement denied that this Infrastructure would be 
used for tracking browsing habits and Identifying users. 42 

In 2008, two European companies reportedly sold a sophisticated electronic surveil- 
lance system capable of monitoring Internet use that could be utilized for tracking and 
monitoring the online activities of human rights organizations and political dissidents. 
The Telecommunication Company of Iran Is said to have received the equipment from 
Nokia Siemens Networks, a Joint venture between the Finnish cell phone maker and 
the German company Siemens. 48 Women’s rights activists reported that they were 
shown transcripts of instant messaging sessions by authorities after their arrest, which, 
If true, would support the existence of an advanced surveillance program. 44 

ONI Testing Results 

The OpenNet Initiative conducted testing In 2008 and 2009 on five ISPs In Iran: TIC, 
Gostar, Parsonline, Datak. and Sepanta. The testing results confirm that Iran has con- 
tinued to consolidate Its position as one of the most extensive filterers of the Internet. 
Iran consistently filters a broad range of Web sites that are offensive to the moral stan- 
dards of Iran's religious leadership. Internet censors In Iran have moved decisively 
against a number of political targets over the past two years. Including women's rights 
groups, human rights organizations, and political opposition parties. 

Filtering In Iran Is Implemented by routing all public Internet traffic through proxy 
servers. This allows the employment of filtering software to target specific Web pages as 
well as the blocking of keywords. The blocking of Web sites Is earned out In a transpar- 
ent manner In Iran; a Mock page Is displayed to users who attempt to access a blocked 
site with a warning that they are not permitted to access a particular Web site. The 
block pages, which vary by ISP, generally Include a contact e-mail address for users 
who might wish to contact the filtering administrators to question or contest the 
blocking of a Web site 

A noteworthy recent development In Iran's filtenng regime Is the Implementation of 
a centralized filtering regime Historically, there has been substantial s’arlatlon In 
blocking across different ISPs, with several ISPs filtering fewer Web sites than TCI and 
thereby offenng a more permissive slew of the Internet. 44 This variation In access to 
Web sites was the result of differences in the Implementation of government filtenng 
instructions by ISPs. This differential filtering practice has now been effectively 
replaced by a uniform filtering pattern with the Implementation of the supplementary’ 
centralized filtenng system. The vestiges of the ISP-based system, however, are still ap- 
parent: the source of filtenng Is made evident by the Mock page that appears, which In 
some cases comes from the respective ISPs and in other cases from a standard block 
page Issued by TCI. It Is unclear what the long-term structure of the filtenng system 
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will be. Options include continuing with the current dual-location filtering system or 
switching to either a system in which all filtering is carried out at a central point or 
to a distributed but centrally coordinated filtering system. Regardless of the method 
chosen for Implementation, It appears that Iran is firmly on the path toward a cen- 
tralized filtering system under the control of the government, as carried out in Saudi 
Arabia, for example. 

The Iranian filtering system continues to strengthen and deepen. In addition to 
targeting "Immoral" content on the Internet. Independent and dissenting voices are 
filtered across a range of Issues, including political reform, criticism of the government, 
reporting on human rights Issues, and minority and women's rights. A notable change 
In the scope of filtering In Iran over the past several years has been an expansion of 
political filtering and blocking of human rights organizations, particularly targeting 
the women's rights movement In Iran. Blocking orders Issued by CCDUS In May 2008 
added many new Web sites to the blocking lists. These Included numerous Web sites 
and blogs of women's rights and human rights activists In addition to several well- 
known |oumallsts. Including www.roozmareglha2.blogfa.com and pargasl.blogfa.com. 
Women's rights Web sites in Farsi, such as www.we-change.org and femlnlstschool 
.com, are consistently blocked In Iran. 

A prominent example of targeted political filtering is the blocking in February 
2009 of www.yaarlnews.lr, a Web site created for the planned election campaign of 
former president Mohammad Khatami. A Web site of the reformist coalition, www 
.baharestanlran.com, was blocked In March 2008. The blocking of Facebook in May 
2009 has proven to be particularly controversial in Iran. Many believe that supporters 
of President Mahmoud Ahmadlnejad were behind the blocking orders, as a reformist 
candidate for president, MlrHosseln Mousavl, had been using Facebook for political 
organizing. 4 * Ahmadlnejad has since denied any Involvement In the decision to block 
Facebook. 47 The blocking of the popular social network Web site was reversed several 
days later after strong popular opposition to the blocking In Iran. 48 Facebook had 
been blocked In the past: ONI testing showed that It was blocked In Fall 2008, with 
access to the Web site allowed again In February 2009A* 

The role of speech restnctlons In the political realm are also evident In the guidelines 
passed down from SCRC to CCDUS In Apnl 2009 that defined allowable speech during 
the 2009 presidential elections for Web sites and ISPs. These guidelines outlined 20 
categories of prohibited speech. Including "disrupting national unity" and "creating 
negative feelings toward the Islamic government."* 0 

Independent media Web sites offered only In English are Inconsistently blocked, 
though a number of prominent Western news Web sites have been blocked in Iran. 
The Huffington Post and the Web site for Al-Arablya (alarablya.net) are blocked in 
Iran. The New Yoik Times, available in May 2009, has been blocked on several occasions 
In the past. Global Voices, an International blog aggregator, was blocked In May 2009. 
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The Web sites of numerous International free-speech organizations are blocked. Includ- 
ing rsf.org, eplc.org, cltlzenlab.org, and eH.org. The Web sites of Amnesty International 
and the OpenNet Initiative were not blocked In May 2009. 

A higher proportion of Independent media Web sites In Farsi are blocked than are 
sites with English-language content. The BBC's Persian service (www.bbcco.uk/ 
perslan) was blocked soon after Its launch In January 2009. The introduction of this 
new broadcast station was condemned by the Iranian government and declared to 
be Illegal. 61 In addition, lranlan.com, roozonllne.com, and radlozamaneh.com are 
among the Independent sources of news and opinion that are blocked In Iran. 

A popular Farsi social networking and Independent news Web site, Balatarln.com, 
was blocked In 2007, reportedly for a user-contributed post with a link to a Web site 
that Included a rumor of the death of Supreme Leader All Hoseynl Khamenei. Strident 
objections by users to the blocking of Balatartn were not successful In reversing the 
blocking decision, and Balatarln continues to be blocked. 

The Web sites of several ethnic and religious minorities are blocked in Iran, Includ- 
ing those associated with the Baha'i faith and Kurdish movements. Web sites that are 
critical of Islam are widely blocked. A higher proportion of Web sites In Farsi related to 
religious and minority rights are blocked than those In English. 

The blocking of blogs In Iran Is focused primarily on individual blogs. However, sev- 
eral blog-hostlng services are blocked In their entirely, including www.livejoumal.com 
and www.xanga.com. Also, technoiad.com and boingbolng.com are blocked. 

In fall 2008, the ONI tested a sample of approximately 8,800 blogs, drawing the 
sample from the blogs in the Farsi blogosphere that had the highest number of links 
to one another. 62 Of these, approximately 9 percent were found to be blocked by TCI. 
A majority of the blogs that were blocked are associated with secular politics and 
reformist viewpoints. However, blogs from the conservative and religious segments of 
the blogosphere were blocked as well, several of which apparently Included content 
deemed to be too extreme. Further ONI analysis carried out over a sample of filtered 
and unfiltered blogs displays a systematic targedng of blogs with oppositional views 
but with substantial Inconsistency; many blogs with solidly dissident Mews remain 
unblocked, while other blogs without controversial content are blocked. 

Several popular social networking Web sites are blocked In Iran, including MySpace 
.com and Oriiut.com. Prior to being blocked, Orkut was highly popular In Iran. 
Among the more prominent social media Web sites, FlKkr.com, www.bebo.com, 
www.metacafe.com, www.photobucket.com, and dellclous.com are all blocked. After 
several episodes of blocking in the past. YouTube, one of the most popular destinations 
for Iranian Internet users, was available In May 2009. 

Consistent with one of the stated objectives of Iran's filtering policy, pornographic 
content Is heavily filtered. Iran Is highly successful In blocking pornography, blocking 
a vast majority of the Web sites tested by ONI. Sites that Include photographs depict- 



lng provocative attire are also consistently blocked. Esmall Radkanl, of Iran's quasl- 
offidal Information Technology Company, claimed In an Interview in September 
2006 that 10 million Web sites were filtered at that time. 90 percent of which con- 
tained "immoral" content. 68 Another official was quoted in November 2008 saying 
that 5 million Web sites were blocked in Iran. 64 Gwen the large number of Web sites 
with sexual content blocked In Iran, neither of these estimates Is Implausible. 

The filtering of material related to sexuality extends as well to Web sites offering con- 
tent related to sexual education. Approximately half of the dating Web sites tested by 
ONI were found to be blocked In Iran. OpenNet Initiative testing also found significant 
blocking of content related to homosexuality, particularly if It had any connection to 
Iran. A number of Web sites related to drugs, alcohol, and gambling are blocked in 
Iran, although many remain unblocked. 

Web sites that offer tools and techniques for circumventing filters are also heavily fil- 
tered. |ust as new Web sites with options for circumventing Internet filters are regularly 
offered by Internet users around the world, blocking lists In Iran are frequently updated 
to Include these new Web sites. A great majority of Web sites offenng information 
about and access to circumvention tools tested by ONI were blocked. 

The proxy server filtering strategy also permits filtering by keyword. Web searches 
that include the keyword “women" are still blocked In Iran. The word "sex" and a 
broad range of words related to sexual activity both In English and Farsi are blocked. 
The Farsi word for "photograph" Is abo blocked. 

Conclusion 

Iran continues to strengthen the legal, administrative, and technical aspects of Its 
Internet filtering systems. The Internet censorship system In Iran is one of the most 
comprehensive and sophisticated In the world. Advances In domestic technical capac- 
ity have contributed to the Implementation of a centralized filtering strategy and a 
reduced reliance on Western technologies. Despite the deeply held commitment to 
regulating Internet content, authorities continue to be challenged in their attempts to 
control online speech. Political filtering related to the 2009 presidential campaign. 
Including the blocking of Facebook and several opposition party Web sites, brought 
renewed attention to the role of filtering In Iran and shows a clear inclination toward 
second-generation controb. 
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Saudi Arabia 


Saudi Arabia fillers Web slles related 
to opposition political groups, human 
rights Issues, and religious content 
deemed offensive to Muslims. Pornog- 
raphy and Web sites containing LGBT 
content are pervasively filtered, as 
are circumvention and online privacy 
tools. Bloggers have been arrested and 
blogs and Web sites run by online 
activists have been blocked. 



Background 

Saudi Arabia Is the birthplace of the Prophet Muhammad and the cradle of Islam. It 
embraces a strict interpretation of Sunni Islam and has a strong religious self-identity. 
Political parties are banned, and activists who publicly call for reform risk being (ailed . 1 
Journalism Is strictly controlled, and journalists must exercise self-censorship In order 
to avoid government scrutiny and dismissal . 2 

Despite substantial Saudi Investment in pan-Arab satellite television such as the 
Dubai-based MBC channels and the Bahrain-based Orbit Satellite Network, the media 
environment within Saudi Arabia Is one of the most tightly controlled in the region. 
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1 KEY INDICATORS ft 

COP per capita, PPP (constant 2005 international dollars) 

21,659 

L Me expectancy at birth (years) 

73 

Literacy rate (percent of people age 15+) 

85 

Human development index (out of 1 79) 

55 

Rule erf law (out of 211) 

87 

Voice and accountability (out of 209) 

193 

Democracy index (out of 167) 

161 (Authoritarian regime) 

Digital opportunity index (out ofl 81 ) 

75 

Internet users (percent of popxiation) 

30.5 


Source by irxfcator World Bank 2009a, Work) Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economist Intelligence Unit 2008, ITU 2007, ITU 2008. 


The kingdom's four television networks — Including news channel Al-lkhbarta — and Its 
radio stations are operated by the state-owned Broadcasting Service of the Kingdom of 
Saudi Arabia (BSKSA), which Is chaired by the Saudi minister of culture and Informa- 
tion. 3 Private television and radio stations are prohibited on Saudi soil.* However, the 
minister of culture and Information said In May 2009 that an official committee had 
been formed to study the draft privatization project of Saudi television and the Saudi 
News Agency’, and that the Ministry of Culture and Information was considering grant- 
ing a number of radio licenses. 5 

Blogging has grown as a medium for expression In Saudi Arabia, with an estimated 
2,000 bloggers In 2006, half of whom are women." In 2005, the government tried to 
ban Blogger, the platform most often used by Saudi bloggers. 7 However, after a few 
days the ban was lifted, with the censors choosing to block specific content hosted on 
the platform Instead. 8 

In November 2008, Saudi activists launched for the first time a daring move to sup- 
port a human rights campaign online and called for a two-day public hunger strike to 
protest the detention without charges of human rights activists. The campaign was 
highly publicized and received coverage from International media." 

In early 2009, Saudi Arabia was ranked by the Committee to Protect Journalists as 
one of the ten worst countries In which to be a blogger, citing the widespread self- 
censorship and local calls by influential clerics for harsh punishment for online writers 
who post content deemed heretical. 10 

Internet In Saudi Arabia 

Since Its creation In 1998, the state-run Saudi Telecom Company (STC) had been the 
sole provider of telecom services. However, in an effort to join the World Trade Organi- 
zation (WTO), the government opened the telecommunication sector to competition 
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in 2002." To enhance the Information and communication technology (ICT) infra- 
structure In the kingdom, STC started installation of 1P-VPN service at various speeds 
of up to 2.S Gbps. 12 

The telecom sector continues to grow with relative consistency. Service revenues 
have been climbing steadily at an annual average rate of nearly IS percent since 2001 . 
Despite high mobile revenues, the kingdom's broadband penetration rate of about 1 
percent remains well below the world average of S percent and the 20 percent bench- 
mark of developed countries. 1 5 This situation, however, Is likely to change as advanced 
ICT projects are Introduced. These projects Include STC's launch of a home fiber-optic 
service providing Internet speed reaching 100 Mbps for Its clients In the kingdom.'* 

The government's Internet Services Unit (1SU), a department of the King Abdulazlz 
City for Science and Technology (KACST), has been responsible for overseeing Internet 
services in Saudi Arabia and for Implementing government censorship. 14 As Its Web 
site explains, 2S licensed ISPs connect users to the national network. 16 In accordance 
with a Council of Ministers decision, the Saudi Communications Commission was 
renamed the Communications and Information Technology Commission and took 
charge of licensing and filtenng processes previously managed by KACST. 1 7 

Because of numerous restrictions on the public Interaction of unrelated men and 
women and the limited roles of women In open society, the Internet has emerged not 
only as a popular means of socialization but also as one that Is dominated by women. 
Reports estimate that two-thirds of Saudi Internet users are women. 18 Some Saudis be- 
lieve that cyberspace has encouraged people to lead "double lives," conducting them- 
selves In a more conservative manner in the public eye while engaging in far more 
liberal behavior online. 19 

Legal and Regulatory Framework 

Saudi newspapers are established by decree. Although pan-Arab newspapers are avail- 
able, they are subject to censorship and tend to conform to the state’s standards when 
contemplating the publication of sensitive content.* 0 Public criticism of the Saudi lead- 
ership and the questioning of Islamic beliefs are not generally tolerated, but In the 
post-9/11 era and amid Instances of Internal militancy, a bolder and more candid 
approach has brought about at least some press and television coverage of more con- 
troversial topics. 21 This approach remains limited, however. For example. In January 
2008 the Ministry of Culture and Information Imposed a nationwide ban on all live 
broadcasts from Saudi public television channels two days after disgruntled viewers 
phoned In to the AUkhbarlya news channel and made critical remarks targeting senior 
Saudi officials. The ban compelled Reporters Without Borders to call for a reversal of 
the government's action and the reinstatement of the network’s director, who had 
been fired after the Incident. 22 
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The Saudi government openly admits to filtering and explains Its policy In a section 
of the ISU Web site. 23 According to this Web site, KACST Is directly responsible for fil- 
tering pornographic content, while other Web sites are blocked upon request from 
"government security bodies." The Web site also has forms that enable Internet users 
to request that certain Web sites be blocked or unblocked. According to a KACST offi- 
cial, "The majority of blocked Web sites contain pornographic content, and over 90 
percent of Internet users have tried to access a blocked Web site." 24 The censors rely 
on citizens, who send In roughly 1,200 requests a day to have Web sites blocked. 23 

In January 2008, Saudi Arabia Implemented 16 articles of a new law on the use of 
technology. Its provisions Include penalties of ten years In prison and a fine for Web 
site operators that advocate or support terrorism; three years and a fine for financial 
fraud or Invasion of privacy; and five years and a fine for those guilty of distributing 
pornography or other materials that violate public law, religious values, and social 
standards of the kingdom. Accomplices of the guilty parties and even those who are 
proven to have only Intended to engage In unlawful IT acts can receive up to half of 
maximum punishments. 2 * 

Providers and distributors of Internet equipment can also be held liable under the 
new law. Including Internet cafe managers whose facilities are used to post content 
that Infringes upon the “values” of the kingdom. 22 

The new law was Implemented amid global scrutiny of the landmark lmprtsonment 
of Saudi blogger Ahmad Fouad Al-Farhan, who was arrested by the Saudi government 
for violating "nonsecurity regulations." Al-Farhan Is reported to have stated that he 
was arrested because he ''wrote about political prisoners In Saudi Arabia." 28 Al-Farhan 
was freed after more than four months In prison. 29 

The new law has also been applied In nonpolltlcal cases. For example, a court fined 
a young man S0,000 Saudi rlyals (approximately USD 13,000) and sentenced him to 
22 months In (all and 200 lashes after he was found guilty of breaking Into a woman's 
e-mail account and stealing photos of her. The man threatened to post the photos of 
the woman on the Internet If she did not agree to have an affair with him. 30 

In July 2008, the Saudi authorities reportedly refused to renew the residence permit 
of an Egyptian national who had lived In Saudi Arabia for 44 years for writing articles 
In newspapers and on the Internet that were critical of the Egyptian regime. 31 The 
Arabic Network for Human Rights Information claimed that the writer's activities 
"only amount to writings about his concerns and opinions about Egypt and do not 
include any Saudi related matters." 32 

In an unprecedented move, Saudi Arabia's National Human Rights Society 
announced attempts to have Web sites of Arab and international human rights or- 
ganizations unblocked by the Saudi authontles. 33 The chairman of the society said 
that they are aware of the blocking of Web sites of Human Rights Watch. Reporters 
Without Borders, and the Arabic Network for Human Rights Information Inside Saudi 
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Arabia. He added that ''blocking these sites is tantamount to deposing Saudi Arabia of 
Its hghts as a member of the UN Human Rights Council" and that "blocking those 
websites violates clause 19 of the International Human Rights Declaration, which deals 
with freedom of expression and clause 23 of the Arab Human Rights Charter." 14 

In May 2009, 13 female Saudi loumallsts filed complaints with the Ministry of 
Intenor accusing the local online newspaper Kul Al-Wahui (All of the Homeland) of 
"defaming and distorting the Image of the Saudi media." The journalists said the on- 
line newspaper published an offensive report entitled "Saudi Women In Red Nights," 
In which It alleged that prostitution, akohol, and drugs have become widespread in 
Saudi society and that female journalists rely on Illicit relationships with newspaper 
bosses to get support and fame. One of the female journalists accused the witter of 
taking advantage of an absence of censorship In online publishing In Saudi Arabia. 14 
Shortly thereafter, the minister of culture and Information announced that Saudi 
Arabia Intends to enact laws, regulation, and legislation for newspapers and Internet 
Web sites. This regulation will require Saudi-based Web sites to get official licenses 
from a special agency under the purview of the Ministry’. The minister said the pro- 
posed regulation alms to deter "dangerous" writing In newspapers and on Web sites. 16 

Surveillance 

Like many countries In the Middle East, the Saudi authorities monitor Internet activ- 
ities. In March 2009, Internet cates were ordered by the Ministry of Interior to install 
hidden cameras and provide a record of names and identities of their customers. 17 

The Saudi religious police have also expressed an Interest In practicing online surveil- 
lance. Members of the religious police (the Commission for Promotion of Virtue and 
Prevention of Vice) asked the chairman of the Saudi Shura (Consultative) Council to 
enable them to have access to blocked Web sites, "to monitor Immoral practices by 
visitors of these sites." 18 The religious police have argued that some young people 
"get involved In negatls'e practices away from the eyes of the Saudi authorities" on 
these blocked Web sites, and are therefore striving to put a stop to the "Immoral 
practices" online. 1 ’ The chairman of the Shura Council, however, questioned the legit- 
imacy of the request and stated, "These justifications must be supported by clear evi- 
dence, otherwise there Is no need for It." 40 

ONI Testing Results 

The OpenNet Initiative conducted ln-country testing on three ISPs: STC, National 
Engineering Services and Marketing (Nesma), and Arabian Internet and Communica- 
tions Services (Awalnet). The three providers blocked the same Web sites, as expected 
given the centrally administered filtering system. 
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Using Secure Computing’s SmartFllter software for technical Implementation and to 
Identify Web sites for blocking, the Saudi censors have Increased the number of targeted 
Saudi political reformists and opposition groups. In addition to the previously blocked 
Web sites such as the Web sites of the lslah movement (www.islah.tv and lstah.lnfo) 
and the Tajdeed movement (tajdeed.net), the authondes have added more opposition 
Web sites to the block list. Examples Include www.alumah.com and www.alhl|azonllne 
.com. Testing In 2008-2009 also revealed that the censors now target user-generated 
oppositional content such as the forum New Arabia (www.newarabla.org). 

The ONI monitored In -country access to the blog of Saudi blogger Ahmad Fouad 
Al-Farhan. who was |a!led for more than four months. His blog was found to be 
blocked during his arrest and continued to be blocked even after he was released from 
prison. Also, the ONI verified that the Web site of the Voice of Saudi Women 
(www.saudlwomen.net), now defunct, was indeed blocked In October 2008. The Web 
site, according to Reporters Without Borders, published a number of analytical reports 
about the status of women in Saudi society and has denounced Impediments to 
women becoming effective actors In Saudi society. 41 

The ONI also found that the blog Saudi Christian (chrlstforsaudl.blogspot.com) 
was blocked In Saudi Arabia in January 2009. after reports that Saudi blogger Hamoud 
Bln Saleh declared on his blog that he converted from Islam to Christianity. The ONI 
monitored the blog and found that It was removed in March 2009 for unknown 
reasons. 

In keeping with the Saudi government's emphasis on protecting the "sanctity of 
Islam" and the legitimacy of the regime, a number of Web sites opposing each are 
also blocked. These Include Web sites relating to minority Shla groups (www.yahoseln 
.com), a Bahai site (www.bahal.com), and sites that espouse alternative views of Islam, 
such as the Web site of the Institution for the Secularization of Islamic Society 
(www.secularlslam.org). Web sites that present critical reviews of the religion of Islam 
and tty to convert Muslims to other religions were also censored (answerlng-lslam.org, 
www.lslamrevlew.com). 

The Web pages of a few global free speech advocates, such as Article 19 (www 
.artldel9.org) and the Free Speech Coalition (www.freespeechcoalldon.com), are 
blocked. However, filtering of human rights content primarily targets Saudi or regional 
organlzadons. All Web pages of the Saudi Human Rights Center (www.saudlhr.org) are 
blocked. 

The human rights Web site www.humum.net was found blocked in 2008-2009 
tesdng. whereas only the page related to Saudi Arabia was found to be blocked In the 
previous phase of testing. The Web site receives complaints on human rights vloladons 
from Arab citizens and Is run by the Cairo-based Arab Human Rights lnformadon 
Network. 
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Most global media Web sites tested, Including Israel-based news outlets such as the 
dally Haaretz (www.haaietz.com), were accessible. However, Web sites of certain prom- 
inent Arabic newspapers and news portals were blocked, including the Arab-language 
newspaper Al-Quds Al Arab I (www.alquds.co.uk) and the news portal Elaph (www 
.elaph.com). Access to Elaph was restored several months after testing. 

"Immoral" social content continues to be a priority target for Saudi censors. The vast 
majority of pornographic Web sites that were tested were blocked, as were most of 
those featuring provocative attire or gambling. The 2008-2009 testing also showed 
that censorship has expanded to block Arable-language Web sites containing explicit 
content 

Also blocked were numerous Web sites containing content relating to alcohol and 
drugs, gay and lesbian Issues, and sex education and family planning. A substantial 
number of Internet tools. Including anonymizers and translators, were filtered. 

Conclusion 

Saudi Arabia publicly acknowledges censoring morally Inappropriate and religious In- 
sensitive material, but the authorities also filter political opposition Web sites and 
resources on human rights Issues. In addition, the state has Introduced new surveil- 
lance measures at Internet cafe and announced plans to start a system that will require 
local Web sites to register with the authorities. 

Saudi citizens have started to use the Internet for online activism, but the authorities 
have arrested several online writers and blocked their content. A local human rights 
group expressed interest In legally challenging the government’s censorship of human 
rights Web sites. 

Generally, Internet filtering in Saudi Arabia mirrors broader attempts by the state to 
repress opposition and promote a single religious creed. 
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Syria 


The Syrian government has expanded 
the range of Web content It filters, con- 
tinues to detain citizens for expressing 
their opinions online, and monitors 
Internet use closely, broadly worded 
laws, characteristic of second-genera- 
tion controls. Invite government ha- 
rassment and have prompted Internet 
users to engage In self -censorship and 
self-monitorlng In order to avoid the 
state's ambiguous grounds for arrest. 





Background 

In Syria, the media are primarily owned and controlled by the government and the rul- 
ing Baath party. Criticism of the president and his family Is not allowed, |oumallsts 
practice self-censorship, and foreign reporters rarefy receive accreditation . 1 Though 
there have been Improvements in Syrian press freedom since Bashar al-Assad became 
president In 2000 , 2 the state continues to use the ongoing state of emergency to arrest 
media workers . 3 Journalists and political activists constantly risk arrest for virtually any 
reason and are "up against a whimsical and vengeful state apparatus which continually 
adds to the list of things banned or forbidden to be mentioned ." 4 Syrian journalists 
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SyrU 


1 KEY INDICATORS h 

COP per capita, PPP (constant 2005 international dollars) 

4,260 

Life expectancy at birth (years) 

74 

literacy rate (percent of people age 1 5^) 

83 

Human development index (out o 1 1 79) 

105 

Rule erf law (out of 211) 

133 

Voice and accountability (out erf 209) 

198 

Democracy index (out of 167) 

156 (Authoritarian regime) 

Digital opportunity index (out of 1 81 ) 

104 

Internet users (percent of population) 

16.7 


Source by Indicator World Bank 2009a. Work) Bank 2009a. World Bank 2009a. UNDP 2008. World 
Bank 2009b. World Bank 2009b. Economist Intelligence Unit 2008. ITU 2007, ITU 2008. 


have been arrested for Interviewing exiled regime opponents, participating In confer- 
ences abroad, and criticizing government pollcles. s In 2006, Reporters Without Borders 
ranked Syria among the 13 "enemies of the Internet,"* and In 2007 descnbed Syria as 
the biggest prison for cyber dissidents In the Middle East because of the number of 
arrests and the frequency of mistreatment of online activists. 7 In 2009, the Committee 
to Protect Journalists ranked Syria third in a list of the ten worst countries In which to 
be a blogger, given the arrests, harassment, and restrictions that online writers in Syria 
have faced. 8 

The government admits to censoring "pro-Israel and hyper-Islamist" Web sites, such 
as those run by the Illegal Muslim Brotherhood and those calling for autonomy for 
Syrian Kurds. 9 In defense of these practices, former Minister of Technology and Com- 
munications Amr Salem has said that "Syria Is currently under attack . . . and If some- 
body writes, or publishes or whatever, something that supports the attack, they will 
be tried." 10 


Internet In Syria 

The telecommunications market In Syria Is the most regulated in the Middle East and is 
among the least developed. State-owned Syrian Telecom (STE) owns all telecommuni- 
cations Infrastructure and has made some substantial Investment to bring services to 
rural areas, but limited competition exists with private ISPs competing with STE In the 
Internet provision market." 

A government body that Is part of the Ministry of Telecommunications and Tech- 
nology, STE Is also the regulator of telecommunications In Syria; in addition to being 
an ISP, It enjoys a monopoly over wired and wireless services provided anywhere In 
Syria. 12 Telecom providers in Syria Include Syria tel," MTN, 1 * Aya," and SCS-Net, 
which is the ISP arm of the Syrian Computer Society.'* Additionally, MTN and Syrtatel 




now offer 3G mobile broadband In lour major cities, as well as EDGE and GPRS con- 
nectivity (WAP) across the country. 17 However. 3G Is prohibitively expensive for most 
Syrians at nearly USD SO per month. 

The Internet was Introduced to the general public In Syria In 2000 as part of the 
modernization reforms of President al-Assad. In the subsequent seven years, Internet 
use soared by 4,900 percent, far exceeding the global growth rate of 249 percent. The 
vast majority of Syrian users get online service at Syria’s ubiquitous Internet cafes and 
from houses using dial-up connections over landlines. 18 Syrian users continue to access 
blocked Web sites using proxies and circumvention tools, and prefer to use Internet 
caffe to browse banned content because they believe the government can monitor 
Web surfing through home Internet connections. »* 

Legal and Regulatory Frameworks 

The constitution of Syria provides for freedom of speech and of the press, but the 
Syrian government restricts press freedom with repressive laws such as the Emergency’ 
Law. which was put In place in December 1962 and broadly mandates the censorship 
of vanous forms of communication; the 2001 Press Law which sets out sweeping con- 
trols over publications printed In Syria; articles 286 and 287 of the penal code, which 
criminalize spreading news abroad; and Decree No. 6 of 196S, which criminalizes 
"publishing news aimed at shaking the people's confidence In the revolution.'’ 20 

The Syrian authorities extended their censorship of Internet activities and monitor- 
ing of Internet users In March 2008 by ordenng Internet cafe users to provide users' 
names, Identification cards, and times they use their services. 21 The head of the Syrian 
Media Center told Reuters, ‘These steps are designed to terrorize Internet users and 
spread fear and self-censorship in violation of the right to privacy and free expres- 
sion." 22 Government officials said these measures were necessary to guard against 
what they described as attempts to spread sectarian divisions and “penetration by 
Israel." 24 

In addition, an Increasing number of Syrians have faced trial or been Jailed for their 
online writings, and the Syrian authorities continue Judicial persecution of cyber dissi- 
dents. For example, Habib Saleh was tried in December 2008 for publishing articles 
calling for democracy in Syria on the Web site Elaph.com, which Is censored In Syria, 
and was given a three-year prison sentence In March 2009. Saleh was convicted under 
article 28S of the criminal code for "weakening national sentiment" (a charge that Is 
applicable only in wartime, said his lawyer). 24 Similarly, blogger Tadq Blasl received 
a three-year sentence for "weakening national sentiment" as well as "publishing false 
information" on a blog. 24 

In addition, owners of opposition Web sites face harassment by the authorities. For 
example, lawyer and Web site editor Abdallah Soulelman All was detained for 12 days 



for "persisting In publishing legal and political articles criticizing the role of the gov- 
ernment" on his Web site Al Nazaha (alnazaha.org) In |uiy 2008“ 

Access to the social networking site Face book was blocked In November 2007 as 
part of a crackdown on political activism on the Internet. According to a women's 
rights advocate, this action was taken because Facebook helped Syrian civil society 
form civic groups outside government control. 27 However, the government claimed 
that Facebook was blocked because It could become a conduit for Israeli penetra- 
tion of Syrian youth. 28 The advocacy group Syrian Media Center claims that at least 
153 Web sites have been blocked, among which are Blogger (owned by Google), the 
Arabic blogging host service Maktoob, YouTUbe, and Web sites of opposition parties. 
Lebanese newspapers, and Lebanese groups opposed to "Syrian interference in Leba- 
non."*’ In September 2008, the Public Institution for Telecommunication ordered the 
blocking of the entire Web site of the Cairo-based Arabic Network for Human Rights 
Information (ANHRI) as well as their blogs (www.kadb.org). Prior to that, only one 
page on ANHRI’s site containing information about human rights violations In Syria 
was blocked. The organlzadon believes that this blocking was ordered by the security 
forces, "which have a louder voice than the law and the Consdtutlon In Syria." 90 

Internet caffes In Syria are subject to tough measures that make opening one very 
difficult. To start an Internet caffe, one needs to get a license from the Syrian Telecom- 
munlcadons Institution, as well as a security license from the Interior Ministry, which 
sets security Instructions that require each caffe visitor to provide his or her name, lden- 
dficadon. and the names of his or her mother and father. 31 The caffe owner must also 
show visitors which religious and polldcal Web sites they are banned from using. 32 
Failure to follow the rules can result In closure of the cafe, large fines, and. In extreme 
cases, |all dme. 33 

Surveillance 

On Its Web site, STE states that the telecommunications It provides remain private and 
shall not be shared except by law and reguladons at an official request. 34 

However, caffe operators have reported that the authorities ask them to spy on their 
customers and that they believe everything Is monitored. 34 A young cyber dissident 
who was arrested at an Internet caffe In Damascus In late 2006 for his critical online 
writings said security services often request caffe owners to spy on clients, and they pro- 
vide them with software programs for the task. 36 In addition, as mentioned earlier, 
Internet caffe operators must keep a record of their clients' names and Identification to 
present to the authorities on request. 

Furthermore, Syria-based Web sites were ordered by the government In 2007 to 
reveal the Identity and name of those behind any article or comment they published. 37 



The use of cell phones Is also subject to surveillance. The Interior Ministry and the 
Syrian Telecommunications Institution have banned the sale of cell phones that have 
GPS and have WAP services that are not being property monitored by the service 
providers.* 8 

Technical censorship In Syria Is Implemented using software from a Canadian com- 
pany called Platinum, Inc.* 9 The company uses the Thunder Cache solution for URL 
filtering, which Is a system capable of monitoring and controlling a user’s dynamic 
Web-based activities as well as conducting deep packet Inspection. 40 

ONI Testing Results 

OpenNet Initiative testing was conducted on two ISPs In Syria: formally SCS-Net (also 
known as Aloola) and Aya. 

The testing results for 2008-2009 indicate that Syria’s Internet filtering regime has 
Increased the scope and depth of targeted content Censorship has been extended to 
Include high-profile Web sites such as the video-sharing site YouTube, the social net- 
working site Facebook, and the online shop Amazon. 

Political filtering continues to be pervasive. For example, Web sites of the Syrian 
branch of the Muslim Brotherhood such as lkhwansyna.com and Jlmsyr.com (now de- 
funct) were blocked. Unlike results from 2006 to 2007, more Web sites affiliated with 
the Muslim Brotherhood, Including that of the Egyptian branch, were blocked. Exam- 
ples Include swsvsMkhwanonllne.com. wvsvsMkhwanweb.com, and www.lkhwan.net. 

Results from 2006 to 2007 testing Indicated that only two Kurdish Web sites 
were blocked, but results from 2008 to 2009 testing show that several Kurdish Web 
sites have been added to the block list. These Include www.kurdnas.com, amude.net, 
www.kurdlstanablnxete.com, wvsw.paJk-onllne.com, www.kurdmedya.com. and www 
.kurdax.net. 

Also blocked were the Web site of the United States Committee for a Free Lebanon 
(freelebanon.org), which campaigns for an end to Syrian Influence In Lebanese politics; 
the Web site of the Lebanese Forces (www.lebanese-forces.org); and some Lebanese 
newspapers such as vAAV.annahar.com. 

Several political Web sites were also filtered. Among them are the Web site of the 
Reform Party of Syria (www.reformsyrla.org), a Web site of a communist party’ In Syria 
(wvAv.syrUalaan.com), the Web site of the Hlzb al-Tahrlr or Liberation Party (www 
.hlzb-ut-tahrlr.org) — an Islamist group that seeks to restore the Caliphate — and various 
news and oppositional Web sites such as www.thlslssyrU.net, www.free-syr1a.com, and 
www.syrUtruth.org. 

The tests conducted by ONI revealed that a number of Syrian blogs hosted on 
Google’s popular blogging engine Blogger (blogspot.com) continue to be blocked, a 



finding which strongly suggests that ISPs have blocked access to all blogs hosted on 
this service. Including many apolitical blogs. Interestingly, Blogger.com (the site from 
which users of the service write posts) Is not blocked, meaning Syrian users can blog 
but cannot read blogs (Including their own). Also blocked was fieesyrla.wordpress.com, 
a blog created to campaign for the release of Michel Kilo, a prominent Syrian (ournallst 
Imprisoned for his writings. 

Results for 2008-2009 confirmed that Syria has unblocked access to the popular 
e-mail service Hotmail as well as the small Web-based e-mail sites address.com and 
netaddress.com. All three were found to be blocked In previous rounds of testing. 
None of the Arable-language e-mall sites ONI tested were blocked, though the Arable- 
language hosting site www.khayma.com was. Among the few Web sites found 
unblocked since 2006-2007 testing were the localized Arabic version of Wikipedia 
and the Web site of the Lebanese Free Patriotic Movement (www.tayyar.org). 

Though most foreign news Web sites were accessible, those of some prominent 
Arabic newspapers and news portals were found to be blocked. Examples Include the 
pan-Arab, London-based, Arable-language newspapers Al-Quds al-Arabi (www.alquds 
.co.uk/) and AlSIum / al-Awsal (www.asharqalawsat.com), the news portal elaph.com, 
the Kuwaiti newspaper Al Seyassah (www.alseyassah.com), the U.S.-based Web site of 
the Arab Times (www.arabtlmes.com), and the Islam-oriented news and information 
portal Islam Online (lslamonline.net). These publications frequently run articles criti- 
cal of the Syrian government. 

Web sites of human rights organizations were generally available Those associated 
with the London-based Syrian Human Rights Committee (SHRC) and the Web site of 
the Syrian Observatory Human Rights (www.syrlahr.com) were notable exceptions. As 
Indicated preciously, some blogs that criticize the human rights record of Syria were 
also blocked. 

Several Israeli Web sites were tested to confirm whether or not Syria blocks the entire 
"11" domain. All tested Web sites within the domain were blocked, suggesting that the 
entire domain Is Indeed blocked. In addition, URLs containing the keyword "Israel" 
were found to be blocked. 

Nearly one-third of the anonymizer Web sites tested were blocked. Indicating some 
measure of eflort to preempt circumvention. None of the Web sites containing porno- 
graphic content were found to be blocked, Including the select few found blocked In 
2006-2007 testing. Additionally, as In the 2006-2007 rounds of testing. Web sites 
that focus on LGBT Issues were generally available. 

Syrian ISPs ofler an optional filtering system to block content deemed Immoral and 
violent, as well as chat Web sites. The ONI did not test the scope and depth of these 
optional systems. 

Filtering continues to lack transparency; there is no explicit block page, and the ISPs 
and telecom regulators do not publish clear Information about what they filter. 



Conclusion 


In addition to high-profile Web sites such as YouTube. Amazon, and Facebook. the 
Web sites blocked in Syria span a range of categories, with the most substantial filtering 
being of Web sites that criticize government policies and actions or espouse opposi- 
tional political slews. Repressive legislation and the Imprisonment of journalists and 
bloggers for their activities online have led many Syrians to engage In seif-censorshlp, 
which conforms to second-generation controls found in other parts of the world. 
Meanwhile, the government continues to promote the growth of the Internet through- 
out the country. 
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Tunisia 


Although Tunisia has actively sought 
to develop Its Information and com- 
munication technology (1CT( Infra- 
structure. the government continues 
to pervasively block a range of Web 
content and has used nontechnical 
means, characteristic of second- 
generation Internet controls, to Im- 
pede journalists and human rights 
activists from doing their work. The 

filtering of political content and restrictions on online activity have prompted 
frequent criticism from foreign governments and human rights organizations, as 
well as online protest campaigns from Tunisian Internet users. 



Background 

The Tunisian constitution guarantees freedom of the press under "conditions laid 
down by law," but the government closely controls the media. Additionally, the Press 
Law criminalizes defamation, and those who violate It can be imprisoned and fined.' 
Tunisia Is considered by media watchdog Reporters Without Borders to be "the region’s 
most authoritarian regime" In regard to civil liberties. Journalists and human rights 
activists have been banned from leaving the country and are subject to arrest and 
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1 KEY INDICATORS [ 

GDP per capita. PPP (constant 2005 international dollars) 

7,102 

Life expectancy at birth (years) 

74 

literacy rate (percent of people age 15+) 

78 

Human development index (out erf 1 79) 

95 

Rule erf law (out of 211) 

84 

Voice and accountability (out erf 209) 

181 

Democracy index (out of 1 67) 

141 (Authoritarian regime) 

Digital epportunity index (out of 1 81 ) 

87 

Internet users (percent of popciation) 

27S 


Source by indicator World Bank 2009a. World Bank 2009a. World Bank 2009a. UNDP 2008. World 
Bank 2009b. World Bank 2009b. Economist Intelligence Unit 2008. ITU 2007, ITU 2008. 


Imprisonment- The majority of the country's newspapers conform to the official line of 
the government, and opposition newspapers have been seized. 2 The Internet Is also 
heavily regulated and perceived as a potential threat to the stability and security of 
the country* There are also Instances of banning foreign publications for publishing 
content that Is deemed prejudicial to Islam.* 

Internet In Tunisia 

Tunisia has one of the most developed telecommunications infrastructures In North 
Africa, with a high mobile penetration rate and one of the lowest broadband prices In 
Africa. 4 As of October 2008, the number of GSM subscribers had reached 9 million, 
while the number of Internet users was 1.7 million. 114,000 of whom have broadband 
subscriptions. 6 Out of a population of 10.2 million, nine out of ten Tunisians own a 
cell phone. 7 Of the Internet users, 84 percent access the Internet at home, 75.8 percent 
use It at work, and 24 percent use Internet caffe* 

The Tunisian Ministry of Communications established the Tunisian Internet Agency 
(ATI) to regulate the country's Internet and DNS services, which had formerly- fallen 
under the purview of the Regional Institute for Computer Sciences and Telecommuni- 
cations (lRSlT).’ The ATI Is also the gateway from which all of Tunisia’s 11 ISPs lease 
their bandwidth. 10 Six of these ISPs are public (ATI, 1NBMI, CCK, CIMSP. IRESA, and 
Defense's ISP); the other five— Planet Tunlsle. 3S Global Net, H EXABYTE. TopNet. and 
TUNET— are private." 

The government has made concentrated efforts to spread Internet access. The ATI 
reports connectivity of 100 percent for the education sector (universities, research lab- 
oratories, secondary schools, and primary schools). 12 Government-brokered "free 
Internet" programs that provide Web access for the price of a local lelephone call and 
Increased competition among ISPs have significantly reduced the economic barriers to 
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Internet access. Tunisians for whom personal computers remain prohibitively ex- 
pensive may access the Internet from more than 300 Internet cafes set up by the 
authorities.' 5 

Legal and Regulatory Frameworks 

In addition to filtering Web content, the government of Tunisia utilizes laws, regula- 
tions, and surveillance to achieve strict control over the Internet. 

For example, journalists have been prosecuted by Tunisia's press code, which bans 
offending the president, disturbing order, and publishing what the government per- 
ceives as false news. 14 The government also restricts the media by controlling the reg- 
istration of print media and licensing of broadcasters, refusing permission to critical 
outlets, and controlling the distribution of public sector advertisement' 5 Journalists 
are also charged In court with vague violations of the penal code.'® 

Online dissidents face severe punishment. For example, human rights lawyer 
Mohamed Abbou was sentenced to three and a half years in prison In 2005 for publish- 
ing on a banned Web site a report in which he accused the government of torturing 
Tunisian prisoners.' 7 

In a landmark legal case that challenged the Web-filterlng regime In the country, 
journalist and blogger Zlad El Henl filed a legal suit against the ATI for censortng the 
social networking site Facebook.'* The Tunisian Union of Free Radio Stations and 
the Unionist Freedoms and Rights Observatory joined El Henl In the lawsuit and called 
for Tunisian President Zlne El Abldlne Ben All to testify.' 9 Facebook was blocked on 
August 18, 2008, and then unblocked on September 2 at the Tunisian president's 
request. 20 The Thud District Court of Tunisia, however, dismissed the case in Novem- 
ber 2008 without providing any explanation . 2I 

In addition to being blocked in TUnisla, many opposition and dissident Web sites 
and blogs have been targets of hacking attempts and. In some cases, successful content 
removal and shutting down of servers. 2 * Although It Is not clear who Is behind these 
cyber attacks, many Tunisian opposition leaders believe the government Is responsi- 
ble. 25 For example, the Independent news site Kalima (www.kallmatunlsle.com) was 
hacked Into and shut down in October 2008. The eight-year Arabic and French 
archives were completely destroyed. The Web site has been blocked since it was 
launched In 2000. Its administrator accused the government of being responsible for 
the attack because, as she told the Committee to Protect Journalists, "The only ones 
who benefit from this attack are the authorities." 24 She also stated, "I would not rule 
out the possibility that this act was committed by the secret services, with the aid of 
hackers or pirates based in Tunisia or abroad." The Web-based newsletter Tunis News 
(svww.tunlsnesvs.net) and a blog run by a judge (tunlslawatch.rsfblog.org) have been 
subject to similar attacks. 24 



584 


Tunisia 


Tunisia does not have specific laws that regulate online broadcasting. As a result, a 
group of journalists exploited the lack of legal obstacles to broadcast on the Internet 
and on December 10, 2007, launched Tunisia’s first Internet radio station. Radio 6, to 
mark the 59th anniversary of the World Declaration of Human Rights. 2 * 

Web filtering in Tunisia Is achieved through the use of a commercial software pro- 
gram, SmartFllter, sold by the U 5. -based company Secure Computing. Since all fixed- 
line Internet traffic passes through facilities controlled by ATI, the government Is able 
to load the software onto Its servers and filter content consistently across Tunisia's 1 1 
ISPs. Tunisia purposefully hides Its filtering from Internet users. SmartFllter Is designed 
to display a 403 error message when a user attempts to access a blocked Web site; the 
Tunisian government has replaced this message with a standard 404 error message, 
which gives no hint that the requested Web site Is actively blocked. 27 

Surveillance 

The Tunisian authontles practice various forms of Internet surveillance and request 
that service providers such as Internet cafe become partners In controlling Internet 
use. For example, the authorities monitor Internet cafe. Instruct Internet users to 
show identification before they can use the Internet In some regions, and hold Internet 
caff operators responsible by law for their clients’ online activities. 

There Is also technical surveillance, whereby downloading or adding attachments 
to an e-mall must go through a central server. Under the pretext of protecting public 
order and national security, a 1998 post and telecommunications law enables the 
authorities to Intercept and check the content of e-mail messages; 28 In fact, electronic 
surveillance such as the filtering of e-mail messages of government opponents has 
been reported. 29 Global Voices Advocacy director and Tunisian activist Sami Ben 
Gharbla conducted a test from the Netherlands with two TUnlsla-based activists, and 
confirmed by logging on to their e-mail accounts from the Netherlands that what he 
saw was not what the bloggers saw when they logged on from Tunisia, and that the 
bloggers could not access some of the messages they received 80 

ONI Testing Results 

The OpenNet Initiative carried out tests in Tunisia using the ISPs Planet TUnisle 
and TopNet. Similar to 2006-2007 test results, 2008-2009 testing revealed pervasive 
filtering of Web sites of political opposition groups such as the Democratic Forum for 
Labor and Liberty (www.fdtl.org), Al-Nadha Movement (www.nahdha.lnfo), Tunisian 
Workers' Communist Party (www.albadlLorgl, and Democratic Progressive Party 
(pdplnfo.org). 
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Also blocked were Web sites run by opposition figures such as activist Moncef Mar- 
zoukl (www.tnoncefmarzoukl.net) and Web sites that contain oppositional news and 
politics such as www. nawaat.org, www.perspectlvestunlsiennes.net. www.tunlsnews 
.com, and www.tunezlne.com. 

Web sites that publish oppositional articles by Tunisian |oumallsts were also 
blocked. For example. ONI verified the blocking of the French dally Ubeiatkm in Febru- 
ary 2007 because articles by Tunisian journalist Taoufik Ben Brlk critical of President 
Zine el-Abldlne Ben All appeared on Its Web site.* 1 

Also blocked are Web sites that criticize Tunisia's human rtghts record. These include 
the Web sites of Amnesty International (www.amnesty.org), Freedom House (www 
.freedomhouse.org). Reporters Without Borders (www.rsf.org and www.rsf.fr), the 
International Freedom of Expression exchange (svww.lfex.org), the Islamic Human 
Rights Commission (wsvw.lhrc.org), and the Arabic Network for Human Rights Infor- 
mation (wsvw.hrUifo.org). Although the home page of Human Rights Watch (HRW) 
was accessible, the Arabic- and French-language versions of an HRW report on Internet 
repression In Tunisia were blocked. 

The prominent video sharing sites YouTube (svsvw.youtube.com) and Dallymotlon 
(svww.dallymotlon.com) were found blocked, apparently because Tunisian activists 
used them to disseminate content critical of the regime’s human rights practices. Inter- 
estingly, the Web site of ONI (opennet.net) svas blocked. Also blocked was the Web 
site of Global Voices (svsvw.globalvolcesonllne.org), a nonprofit global citizens’ media 
project. Most of the tested Web sites in the anonymizers and chcumventlon tools 
category svere blocked. These Include Pslphon (pslphon.clvlsec.org), TOR (tor.eff.org). 
Anonymizer (svsvw.anonymlzer.com), e-mail privacy service provider Stealth Message 
(svww.stealthmessage.com), Guardster (wsvw.guardster.com), and |AP (anon.lnf.tu 
-dresden.de). 

The filtering regime pervasively filters pornographic content, several gay and lesbian 
Information or dating pages, provocative attire, and several onbne translation services. 
Also blocked were a few Web sites that criticize the Quran (svwsv.thequran.com) and 
Islam (svsvsv.lslameyat.com). Although the small number of such sites indicates that 
there Is limited filtering of religious content In TUnlsla. 

Conclusion 

Tunisia's government continues to suppress critical speech and oppositional activity, 
both In real space and In cyberspace. Unlike other states that employ filtenng soft- 
ware, Tunisia endeavors to conceal Instances of filtering by supplying a fake error 
page when a blocked Web site Is requested. This technique makes filtering more 
opaque and clouds users’ understanding of the boundaries of permissible content. 
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Tunisia maintains a focused, effective system of Internet control that blends content 
filtering with harsh laws to censor objectionable and politically threatening informa- 
tion characteristic of second-generation controls. 
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The government of the United Arab 
Emirate* (UAE) censor* political and 
religious content and pervasively fil- 
ters Web sites that contain pornog- 
raphy or relate to alcohol and drug 
use, LGBT Issues, or online dating or 
gambling. Online privacy and circum- 
vention tools, as well as some Web 
sites belonging to Nazis or historical 
revisionists, are also blocked. Addi- 
tionally, legal controls limit free expression 
discourse and dissent online. 



and behavior, restricting political 


Background 

The UAE Is a federation of seven emirates formed in 1971 after Independence from 
Britain. Each emirate maintains a large degree of independence, and the UAE Is gov- 
erned by the Supreme Council of Rulers of the seven emits of the emirates. Though 
the UAE is one of the most liberal countries In the Gulf, It was until December 2IK>6 
the only state In the region not to have elected bodies.' 

The UAE's economy continues to grow, but civil society remains stagnant, and 
human rights progress has been slow. Authorities have exerted censorship on a wide 
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1 KEY INDICATORS j 

GDP per capita. PPP (constant 2005 international dollars) 

51.586 

Lie expectancy at birth (years) 

79 

literacy rate (percent of people age 15+) 

90 

Human development index (out of 1 79) 

31 

Rule erf law (out of 211) 

64 

Voice and accountably (out of 209) 

160 

Democracy index (out of 167) 

147 (Authoritarian regime) 

Digital opportunity index (out of 1 81 ) 

37 

Internet users (percent of population) 

65.2 


Source by indicator World Bank 2009a, World Bank 2009a, World Bank 2009a, UNDP 2008, World 
Bank 2009b, World Bank 2009b, Economist Intelligence Unit 2008, ITU 2007, ITU 2008. 


range of activists. Impeding the kind of vigorous monitoring and reporting that can 
draw attention to and help curb human rights abuses.* Although the pnme minister 
decreed in 2007 that journalists should not face prison for "for reasons related to 
their work," current media laws allow for the imprisonment of journalists and sus- 
pension of publication for publishing "materials that cause confusion among the 
public." The government monitors press content, and journalists routinely exercise 
self-censorship.* 

Though the emirate of Dubai has established Itself as a regional and International 
hub for media In which there Is a media zone authonty that allows 100 percent foreign 
ownership and offers tax breaks, the Internet Is filtered In this hub, as ONI test results 
show, and there are reports of other forms of censorship. 4 For example, Dubai author- 
ities Interrupted the broadcast of two Pakistani television stations. Geo News and Ary 
One World, In November 2007. Geo News said the decision resulted from constant 
pressure by Pervez Musharraf, then president of Pakistan, who had at the time Im- 
plemented a state of emergency In Pakistan. 5 Dubai later allowed the two stations to 
resume broadcasting following negotiations with the Pakistani government and Dubai 
Media City. 6 

Internet In the UAE 

According to a World Economic Forum report, the UAE continues to lead the Arab 
world In the adoption of information and communication technolog}’ (ICiy and Is 
expected to spend about USD 3.3 billion on 1CT hardware for schools, hospitals, and 
other civil projects for the period 2008-2011* 

According to the Internet Telecommunication Union, Internet penetration In the 
UAE has Increased from 36 percent in 2006 to an estimated 6S.2 percent in 2008.* 
The Arab Advisors Group states account penetration to be at approximately 2S percent. 
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By the end of 2008, 1 1 percent of the total population had ADSL/broadband accounts. 
By the end of October 2008, the ISP Edsalat's ADSL accounts constituted around 36 
percent of the operator’s total fixed lines. 10 

Edsalat remains the dominant telecom provider, but In the Interests of competition 
the UAE's Telecommunications Regulatory Authority (TRA) facilitated the launch of 
the Emirates Integrated Telecommunications Company, named Du. Established in 
2007, Du Is an integrated telecommunlcadons provider that offers voice, data, and 
entertainment on mobile networks and converged broadband, television, and landline 
services. 11 

Compeddon In the broadband Internet market Is limited because the two ISPs sdll 
do not share each other's networks, and Du Is unable to offer broadband Internet or 
landline telephone services outside of a handful of property developments In Dubai 
where It owns the physical telephone network. 12 Because Etlsalat has been the sole 
telecom company for 30 years, It owns the nadonal telephone network, based on 
both copper-wire and new fiber-opdc cables. 13 

Legal and Regulatory Framework 

A new draft media law Is expected to be Issued In 2009. The highest regulatory media 
organlzadon in the UAE, the Nadonal Media Council (NMQ, claims the draft law 
provides unprecedented provisions that protect and promote freedom of expression in 
the country. It also states that the draft law, "provides journalists freedom from coer- 
cion to reveal sources, reflecdng the government's commitment to the journalistic 
right to protect sources; In this particular regard, the pending law's protecdon exceeds 
that of many advanced democracies. Including the United States." 14 

The pending law, passed by the Federal National Council in January 2009, was 
refected by the UAE Journalists Association because, according to the assocladon’s 
chairman, "It has nothing to do with the concept of media; It contains 4S articles 
which don't provide a proper deserlpdon of the media's dudes and rights. Similarly, 
there are 10 articles which talk about penaldes and punishments." 14 

International advocacy groups have also expressed concerns over the draft law. 
Human Rights Watch argues that the pending draft law unlawfully restricts free expres- 
sion and will unduly Interfere with the media's ability to report on sensitive subjects, 
and that It Includes provisions that would grant the government virtually complete 
control In deciding who is allowed to work as a journalist, as well as which media 
organlzadons are allowed to operate In the country. Human Rights Watch further 
states that while the new law contains some improvements over the draconian media 
law currently in effect. It will condnue to punish journalists for such infracdons as 
"disparaging" government officials or publishing "misleading" news that "harms the 
country's economy." 16 
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The Committee to Protect Journalists has also expressed concern over the draft law 
in a letter they sent to the president of the UAE urging him to reject the law In Its 
current form because, if passed, "it will negatively impact the state of press freedom in 
the UAE." 17 

The telecommunication services in the UAE are regulated by the TRA, which was 
established In 2003 by a federal law and is tasked with ensuring adequacy of tele- 
communications services throughout the UAE and establishing and implementing a 
regulatory and policy framework. 1 * The TRA is responsible for producing the Internet 
Access Management (IAM) policy, which outlines prohibited online content categories 
for ISPs. These categories include Internet tools for accessing blocked content, content 
prodding Information on criminal skills and illegal drugs, content containing pornog- 
raphy and nudity, gambling sites, Web sites for hacking and malicious codes, content 
offensive to religions, phishing Internet sites, Internet content that downloads spy- 
ware, Web sites providing unlicensed VoIP service, terrorism content, and prohibited 
top-level domain, 1 ’' apparently a reference to the top-level domain of Israel (".il"), 
which is blocked in the UAE. 

The UAE government has Issued a federal law on combating cyber crimes. Cyber- 
Crime Law No. 2 of 2006 considers any intentional act that abolishes, destroys, or 
reveals secrets or that results In the republishing of personal or official information to 
be a crime. Individuals may be imprisoned for using the Internet to defame Islamic 
places of worship and traditions, Insult any recognized religion, or promote "sinful 
acts." Anyone convicted of "transcending family principles and values" or setting up 
a Web site for groups "calling for, facilitating, and promoting ideas in breach of the 
general order and public decency" may be |a!led. a ’ 

In August 2007, a court in the Emirate of Ras al-Khaimah sentenced the creator of 
Web site majan.net to one year in prison and a fine for defaming a local official. The 
court also ordered the site to be shut down. In September, the same individual received 
a five-month prison sentence and a fine in a second defamation case involving another 
local official, but was released on ball at the end of September 2007. Two months later, 
his two prison sentences were overturned by an appeals court after defamation com- 
plaints were withdrawn by the officials. In the end, he received a one-year suspended 
prison sentence after being convicted in a third defamation case.* 1 

In April 2009, the chief of Dubai's police force denied allegations that Dubai Police 
had asked UAE's Telecommunication Regulatory Authority to censor Web sites. In ear- 
lier reports, the head of the Doha Media Freedom Center claimed that the Dubai Police 
had developed a list of S00 keywords, by which access to certain Web sites would be 
blocked. 22 The police chief stated that the government did not attempt to censor Web 
sites critical of the UAE. that the S00 search terms were designed to shield UAE Internet 
users against pornographic content, and that they were proposed by the telecommuni- 
cation regulators themselves, not the Dubai Police. 23 This denial came shortly after 
Dubai’s police chief called for the blocking of the video-sharing site YouTube because. 
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he said, II contained religiously Inappropriate content. 24 YouT\ibe and Google have 
denied that they are engaged in plans to censor online content in the UAE. 24 

Although Etlsalat and Du conform to the TRA policies by automatically blocking 
Web sites that offer free VoIP services. Individuals — Including Internet cafe owners — 
have found ways of getting around the ban by using the Internet to make cheap inter- 
national calls. Violators have been prosecuted. For example, a police officer In the emi- 
rate of Ras A1 Khalmah warned several Internet cafe owners against the use of "illegal 
calling cards" for making inexpensive international telephone calls. Several violating 
cates were referred to the police for investigation. 4 * 

Surveillance 

The authorities have established committees and electronic surveillance departments 
to monitor objectionable Internet activities. For example, a government committee 
was established In March 2009 to monitor Internet cafe In order to ensure that Inter- 
net connections In these cafe do not bypass filtering regimes set up by the two 
national ISPs, as per the regulations of the TRA. This move was in response to specula- 
tion that some Internet cafe provided unfiltered Internet connections using virtual 
private networks (VPNs). 27 

In addition, an online surveillance team was set up by Dubai Police to carry out 
around-the-clock checks on the Internet. The team, known as e- police, investigated a 
total of 222 cases In 2008. The cases Include 87 Involving fraud and other financial 
crimes, 38 cases of illegal hacking, and 92 cases of defamation and extortion. The elec- 
tronic patrol team has set up special forums and used assumed names In an attempt to 
collect Information about potential criminal activity. 28 This online surveillance depart- 
ment announced In April 2009 that It managed to track down and later arrest women 
who promoted their sexual services online and publicized their Dubai phone numbers 
on Web sites. In addition, the surveillance team announced that It managed to track 
down Individuals who offered Inexpensive Illegal VoIP services from their apart- 
ments.* 1 

ONI Testing Results 

OpenNet Initiative testing In 2008-2009 revealed that the UAE's censors have 
Increased the scope and depth of Internet filtering. 

One of the significant policy shifts that occurred during 2008-2009 feting Is the Im- 
plementation of TRA-mandated filtering by the ISP Du, which used to offer unfettered 
access to the Internet In the Dubai free zones, Including Dubai Media City, Dubai 
Internet City, and the residential areas affiliated with the free zones. Du began filtering 
on April 14, 2008; 2008-2009 test results show that Its filtering Is almost as extensive 
as that of the other national ISP, Etlsalat, which has the lion’s share of the market. 
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The two ISPs were found to block Web sites that express alternative political or 
religious views. For example. In addition to blocking UAE prison (uaeprlson.com). a 
Web site hosting testimonials of former prisoners and critiques of the government's 
human rights practices, and the Web site of the U.S. -based Arab Times (arabdmes 
.com), the ONI found that the censors blocked the Web site "Save Zack Shahln" 
(www.savezackshahln.com), an online campaign calling for the release of U.S. citizen 
Zack Shahln from a UAE prison. The Web site encourages Americans to help him by 
sending letters to members of Congress. Shahln is a former chief executive of a Dubai 
property developer who In April 2009, together with a former UAE minister, was 
charged with seizing public money and harming state Interests. 30 

Another example Is the blocking of the Web site UAE Torture (uaetorture.com), 
which posted video clips that allegedly show a member of the UAE royal family tortur- 
ing an Afghan businessman. The story drew the attention of international media such 
as ABC 3 ' and human rights advocates such as Human Rights Watch. 3 ' Blocking of this 
Web site has been Inconsistent, however: It has been found to be accessible and inac- 
cessible at different times. 

The UAE’s censors are also apparently sensitive to content that Is critical of the state 
of the local economy or society. For example, censors blocked access to the Arabic UAE 
blog Mu|arad Ensan (mu|ar ad-ensan.maktoobblog.com) In October 2008, a few days 
after the anonymous blogger published a post sarcastically entitled, "Laugh with Me 
and Say: Our Economy Is in a Good Condition." In the text of the blog post, he accused 
the UAE government of lacking transparency when dealing with the U.S. financial 
alsls and the local papers of lying about the real status of the local economy. The 
writer also accused governmentowned real estate companies of publishing exagger- 
ated information about business deals to create the impression that the local economy 
had not been negatively affected by the U.S. financial crisis. The ONI monitored access 
to the blog and found that It became accessible a few days later for unknown reasons. 

Another example Is the blocking of the blog Secret Dubai Diary (secretdubal 
.blogspot.com), which was also found blocked In 2006-2007 testing. Apparently, this 
blog was blocked because It offers a critical review of social life In the UAE. 

Similar to 2006-2007 testing results, several Web sites presenting unorthodox 
perspectives on Islam (thequran.com, lslamrevlew.com, secularlslam.org) were blocked, 
along with a handful of Web sites promoting minority faiths (albrhan.org, ansarweb 
.net). Among the few Web sites considered "extremist" that are filtered In the UAE 
are hlnduunlty.org, which advocates Hindu solidarity and resistance to Islam, and 
kahanetzadak.com, a Web site devoted to the founder of the militant (ewlsh Defense 
League. 

Testing conducted In 2008-2009 showed that censors have expanded filtering In 
these categories to Include previously accessible Web sites such as the presumably 
UAE-based atheist blogs Ben Kerlshan (benkerlshan.blogspot.com). The Land of 
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Sands (Ihdandofsands.com), and Ben Short (bensliort.blogspot.com). Also blocked are 
Wikipedia pages that contain Information about rdlglously sensitive content such as 
FiDta, a film produced by Dutch politician Geert Wilders and considered by many to 
be offensive to Islam, and the Wikipedia page about the Islamic prophet Muhammad, 
possibly because the page displays drawings of the Prophet. 

In March 2009, censors blocked access to the Web site Ahmed and Salim 
(ahmedandsalim.com), an Israeli Web site that posted video episodes considered offen- 
sive to Arabs and Muslims'* The UAE also blocked access to the YouTube links where 
the video clips appeared. The UAE's TKA ordered the blocking of the Web site and the 
YouTube links only a few days after the content appeared online, apparently because. 
In addition to the content perceived as offensive to Islam, one of the characters was 
dressed In traditional Gulf attire and the UAE flag appeared in several scenes.** 

Interestingly, several Web sites on Nazism, Holocaust denial, and historical revision- 
ism were blocked. These Include the Web site hltler.org and that of the Institute for 
Historical Review's publishing arm (www.noonddepress.com). Also blocked was the 
Web site vdare.com, which Is often described as carrying and-Semidc content. Mean- 
while, the state continues to deny access to all Web sites on the Israeli country code 
top-level domain Ml." 

Testing done In 2008-2009 also revealed that UAE filters still target social net- 
working sites, video- and photo-sharing sites, bookmarking services, and blogging ser- 
vices. However, filtering of these Web sites has not been consistent. For example. 
Live) oumal.com, a free service for blogging, was blocked In the UAE in June 2008, 
apparently because It was categorized as a dating site In the database of Secure Com- 
puting. a commercial filtering product. The UAE uses SmartFlltet, a product of Secure 
Compudng. to block access to various content categories Including dating, pornogra- 
phy, sex. and gambling.** Access was restored a few weeks later. 

Similar to 2006-2007 tesdng results, 2008-2009 tesdng revealed pervasive filtedng 
of pornographic and LGBT content. The 2008-2009 results also revealed blocking of 
previously accessible Arabic forums, which are commonly used to facilitate the ex- 
change of Arabic sexually explicit content. 

Compared to 2006-2007 testing, fewer Web sites relating to sexual health education 
were found to be blocked. For example, previously filtered Web sites such as clrcumd- 
slon.org and sexualhealth.com were found accessible, though others In the same cate- 
gories are still blocked. Some Web sites containing provocative attire (llngene.com) 
were still filtered. Web sites promoting alcohol and drug use or facilitating online 
gambling or dating were also blocked In large numbers, and many Arable-language 
dating sites or Web sites that target Arabic users (e.g., www.arablounge.com, 
www.gaymlddleeast.com/country/uaemlrates.htm) have been added to the blacklist. 
Nudity, even If In an artistic context and nonerotlc. Is censored (an example Is the 
Arabic magazine www.jasadmag.com). 
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Internet tools. Including those which facilitate hacking (e.g., theseaetllst.com), 
anonymizers (e.g., anonymlzer.com), and translation tools (Google Web site translator, 
not the text translator), remain substantially filtered. Similarly, numerous VoIP sites 
(Skype.com, www.pc2call.com) were still blocked In accordance with the national ban 
on such applications. 

In October 2006, the UAE unblocked access to soaal networking and multimedia 
sharing sites. Including YouTube.com, Fllckr.com, Metacafe.com, and MySpace.com. 
However, sections of these Web sites containing objectionable material remain 
unavailable. The photo-sharing site FUckr (Fllckr.com) was later blocked entirely. 

Conclusion 

The UAE continues to prevent Its citizens from accessing a significant amount of Inter- 
net content spanning a variety of topics. Though the vast majority of Web sites filtered 
are those deemed obscene in some way. a select few political Web sites are blocked, as 
are some pertaining to Nazis, Holocaust denial, and historical revisionism. The entire 
".ll" top-level domain continues to be blocked as well, which Is mote Indicative of the 
UAE's opposition to the state of Israel than to the content. 

Additionally, the state has extended Its filtenng scheme to the Dubai free zones, 
which previously enjoyed unfettered Internet access, and has lnaeased the depth of 
technical filtering, blocking more Web sites across broader categories. 

The UAE employs SmartFlIter software to block content related to nudity, sex. dat- 
ing, gambling, the occult, religious conversion, and drugs. Web sites pertaining to 
anonymizer tools, hacking, translation tools (as these have been used as proxies), and 
VoIP applications are also filtered In this manna. 

Lastly, there are government efforts to monitor Intanet activities In public Interna 
cafes to ensure that connections provided thae do not bypass national filtering. Elec- 
tronic surveillance to monitor objectionable onUne activities is publlcally acknowl- 
edged by the authorities. 
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Glossary of Technical Terms 


2G Is Use second generation of telecommunication teciusology for mobile networking. 

3G is Use third generation of telecommunication technology for mobile networking. 

403 ( 403 Forbidden) a the staisdard HTTP error code that occurs when a server will not allow a 
Web browser to access Use file being requested. 

404 (404 Not Found) is Use standard IfTTP error code that occurs when a server cannot find the 
file being requested. 

ADSL (asymmetric digital subscriber fine) is a technology that allows data to be sent over existing 
copper tel ephon e lines. 

Bandwidth is tlie amount of dsta that can flow in a given time. 

Block page is Use page delivered to the user when a request for a Web site is filtered, or blocked. 
Block pages take many forms aisd may be disguised as benign error pages or may bear the ISP's 
logo and further explanation of Use block. 

CCTV (closed circuit television) is the use of video cameras to transmit video from a specific place 
to a limited set of monitors. Signals foe CCTV are not openly transmitted. 

Circumvention refers to the general concept of using proxies and oUser tools to bypass Internet 
filtering. 

Deep packet inspection is a form of computer network packet filtering Usat examines the data 
part (and possibly also Use header) of a packet as it passes an inspection point, searching foe pro- 
tocol noncompliance, viruses, spam, intrusions, or predefined criteria to decide if Use packet can 
pass oc if it needs to be routed to a different destinaUon, or for the purpose of collecting statistical 
information . 

DNS (devnuin name system) is a hserardiical naming system for computers, services, or any re- 
source participating in the Internet. 

DNS tampering ( domain name system tampering) is a method of blocking communication by pre- 
venting the conversion of domain names into IP addresses, effectively blocking access to the 
requested site. 
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Domain name b a label identifying a specific computer, service, oc resource on Use Internet. 

DoS attack (Jmiitf of senice attack) b an attempt to prevent users from accessing a specific com- 
puter resource, such as a Web site. DoS attacks (sometimes called DDoS, oc distributed denial of 
senice. attacks) usually involve overwhelming the targeted computer wiUi requests so that it b 
no longer able to cuxnmunicate with its inteisded users. 

DSL (digital Subscriber line) Is a family of technologies that provides digital data transmission over 
existing telephone wires. 

EDGE (Enhanced Data rates for GSM Evolution) also tasown as EGPRS or Enhanced GPRS b a GSM 
extension tliat improves data transmission rates by up to three tiroes tlieir original speed. 

GB (gigabyte) b a unit of digital information storage equal to 10* (1,000,000,000) bytes. However, 
thb term is also often used to mean 1,024 s (1,073,741,824 bytes). 

GPRS (general packet radio imi re) is service for mcfctle devices that divxles data into packets for 
transmission purposes. It can be used with 2G and 3G wireless tel ephone technology operating 
on the GSM standard. 

GPS ( Global Positioning System) is a free global navigation satellite system tliat is used for both 
military and civilian purposes. 

GSM (Global System fir Mobile communications) b a digital mobile phone standard used by as 
much as 80 percent of tlie global market. Its widespread use enables international roaming among 
different mobile phone operators. 

HTTP ( Hypertext Transfer Protocol) b a set of standards for exchanging text, images, sound, and 
video by means of the Internet. 

HTTP proxy filtering blocks communication on Uie bash of the specific HTTP address or URL 
being requested. 

ICP (Internet Cache Protocol) is a set of rules used to coordinate Web caches (places where dupli- 
cations of online data axe temporarily stored, enabling faster access and reducing bandwklth). 

ICP (Internet content provider) b an online service provider tliat creates or prosides informational, 
educational, or entertainment content. 

ICT (mfeermtion and communication technology) is an umbrella tenn tliat includes all technologies 
intended for the manipulation and communication of information. 

IP address ( Internet protocol address) is a numerical Ide n t ifi cation assigned to devices participating 
in a computer network utilizing the Internet Protocol. 

ISP (Internet service provider) a a company tliat provides users with access to the Internet. 

IT (lnfcmaton technology) describes the use of computers, computer software, and other comniu- 
nkabocLs technologies to ertate and manage information. 

IXP (Internet exchange point) b a sliared facility that allows ISPs to exdiange traffic with one 
another through free, mutual peering agreements. 
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KB (kilobyte) is a unit of digital information storage equal to either 1,000 bytes (10 5 ) oc 1,024 
bytes ( 2 l \ depaxfcng on context. 

Kbps (kilobits pa second) is a measure of bandwidth on a data transmission medium. 

LGBT is an acronym that refers to the lesbian, gay, bisexuil. and tramgenJer community. Some- 
times used to refer to anyone who is nonheterosexual. 

MB (mqabyto) is a unit of digital information storage equal to 10* (1,000,000) bytes. 

MP3 (MPEG J Audio Liya 3) b a digital audio encoding format that compresses audio data by a 
factor of 12 without losing noticeable sound quality. 

P2P (pctr-f>pttT) is a computer network tint uses diverse connectivity between participants in 
a network and tlse cumul a tiv e bandwidth of network participants rather than conventional cen- 
tralized resources where a relatively low number of servers provide the core value to a service or 
application. 

Portal 

• if Web portal: is an online interface that allows Internet users to collect and view information 
(e mail, weitlier, stock prices, etc.) from various sources in a visually unified way. 

• if Intranet portal: is a single network- specific hub that provides unified access to information 
and applications, often for a private company or organization. 

Proxy (also Proxy server) is a server tliat acts as a go-between for clients (such as Web browsers 
or other applications) and other servers. Proxy servers enable anonymous online activity and in- 
crease access speed through caching. 

Reverse filtering (also known as Geolocationai Filtering) is a practice tliat occurs on tlie Web 
server hosting the content, as opposed to at a point along the way of the traffic flow, and is based 
on restricting requests based on geographical location of the originating Internet Protocol address. 
Copyright holders who want to restrict access to their content in certain markets often use reverse 
filtering. Examples include hulu.com, BBC.com, and other sites that syndicate commercial video 
and audio content that is subject to licensing. 

SMS (short message service), also known as text message . is a communication service standardized 
in the GSM mobile communication system, allowing the exdiange of short text messages between 
mobile devices. 


Social networking sites are Web services tliat focus on communities of users with sliared inter- 
ests. Popular examples indude Facebook. Twitter, MySpace, and Orkut. 

TB (terabyte) is a unit of digital information storage equal to 1 trillion (10 12 ) bytes, or 1,000 
gigabytes. 


TCP/IP (Transmission Control Protocol/lntemet Protocol) is tlie set of standards governing data 
transmission over the Internet. 


TCP/IP content filtering blocks communication on tlie basis of where packets of data are going 
to or coming from, and not on what they contain. 
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TCP/IP header filtering blocks communication on the basis of the IP address and/or the port 
number (which gives dues as to the type of Web service being accessed) contained m tlie header 
of the data packet being sent. 

Top-level domain die group of letters (usually two or three, but can indude more) that follow 
the final dot in a domain name. Example: in cpamet.net the top level domain is Met. 

URL (Uniform Resource Locator) b a string of characters that specify where a particular resource is 
located online and how to retrieve it. Also known as a Web address. 

User 10 (User Identification) is a unique string of characters tliat identifies users of password- 
protected online services, sudi as e-mail or social networking sites. 

VCD (Video Compact Disc) is a digital compression standard tliat enables the storage of video on a 
Compact Disc. 

VoIP (Vcete over Internet Protocol) is a technology tliat allows for voice communication over tlie 
Internet. 

WAP (Wireless Application Protocol) is a global standard foe tlie transfer of information without 
using electrical conduits (wires). It allows for access to tlie Internet using mobile devices. 

Warez (derived from the plural of "ware." as in software) refers to copyrighted material that is 
distributed in violation of copyright law. 

White Hat a person who attempts to infiltrate information technology systems or networks in 
order to expose weaknesses so they can be corrected by tlie systems' owners. Abo known as an 
ethical hacker. 
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